Cloudflare mitigated 18.2 million DDoS attacks in Q3 2026
Attacks rose 208% year over year, but 98% stayed under 1 Gbps and most ended within ten minutes.
58
Malware
Kimwolf
- Mentions · 7d3
- Mentions · 30d6
- All mentions11
- First seenAug 12, 2026
- Last mentioned19h ago
Timeline
11 articles · newest firstCloudflare blocked over 8,200 network DDoS attacks an hour in Q3
Most attacks lasted under ten minutes and stayed below 1 Gbps, while terabit-scale floods fell nearly 69% from the prior quarter.
58
Cloudflare: short DDoS bursts rose 208% in Q3 2026
Attacks over 1 Tbps fell to 251 from 805 after takedowns of four large IoT botnets.
46
DDoS attacks can knock services offline before links reach capacity
NETSCOUT logged 9.1 million DDoS attacks in H1 2026, with terabit-scale floods up 1,286%.
62
Anthropic conjures another threat that doesn't exist yet to stoke fears of AI apocalypse
The Register says Anthropic's self-replicating AI worm research overstates a threat that does not yet exist.
56
Anthropic Shows How Small AI Models Could Replicate Across IoT Devices
Anthropic says small models may soon replicate themselves across poorly secured IoT devices.
64
Security Affairs newsletter Round 590 by Pierluigi Paganini
Weekly Security Affairs newsletter roundup aggregating top cybercrime, malware, APT and AI security stories including ExfilSquad, Kimwolf v7 and Kimsuky AI use.
10
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
New Kimwolf v7 Android botnet adds HTTP/2 DDoS floods with Chrome fingerprints and takedown-resistant ENS/Tor C2.
55
New Mirai variant adds stealth capabilities to notorious botnet code
FortiGuard Labs reports new Mirai-derived botnet Evooo1Bot actively exploits unpatched routers and edge devices, adding encrypted C2, stealthy SSH scanning, and proxying.
60
Kimwolf v7 Hides DDoS Traffic Behind Chrome Fingerprints and Ethereum
Unit 42 details Kimwolf v7, an Android TV botnet upgrade using HTTP/2 Chrome-fingerprint DDoS floods and Ethereum ENS-based C2 across 1.8M+ infected devices.
55
Kimwolf botnet rebuilt to survive takedowns, researchers say
Palo Alto Unit 42 reports the Kimwolf/Aisuru botnet now uses HTTP/2 Chrome-impersonation floods and Ethereum blockchain-based command resolution to survive takedowns.
57
Related CVEs
by mentions- CVE-2024-36401100%9.8Unauthenticated RCE in OSGeo GeoServer via GeoTools XPath Injection
Appears with
- Aisurumalware · 7
- Miraimalware · 7
- Jackskidmalware · 4
- Mossadmalware · 3
- Cloudflarevendor · 3
- Android TVproduct · 3
- Evooo1Botmalware · 3
- GLM-5.2ai model · 2
- Gemma4-26B-A4Bai model · 2
- Cloudforce Oneorganization · 2
- Anthropicorganization · 2
- Kimwolfthreat actor · 2
- Dysphoriamalware · 2
- Palo Alto Networksvendor · 2
- Unit 42organization · 2
- Security Affairsvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.