Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
New Kimwolf v7 Android botnet adds HTTP/2 DDoS floods with Chrome fingerprints and takedown-resistant ENS/Tor C2.
55
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 12, 2026
- Last mentionedAug 15, 2026
Timeline
2 articles · newest firstKimwolf botnet rebuilt to survive takedowns, researchers say
Palo Alto Unit 42 reports the Kimwolf/Aisuru botnet now uses HTTP/2 Chrome-impersonation floods and Ethereum blockchain-based command resolution to survive takedowns.
57
Related CVEs
by mentions- CVE-2024-36401100%9.8Unauthenticated RCE in OSGeo GeoServer via GeoTools XPath Injection
Appears with
- Kimwolfmalware · 2
- Palo Alto Networks Unit 42organization · 1
- Miraimalware · 1
- Chromeproduct · 1
- Palo Alto Networksvendor · 1
- Aisuruthreat actor · 1
- Palo Alto Networks Unit 42vendor · 1
- Kimwolf v7product · 1
- AISURUmalware · 1
- Unit 42organization · 1
- AISURUproduct · 1
- Android TVproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.