Aisuru
- First seen
- 2019-02-01 00:00:00
- Malware type
- botnet, ddos
- Last IoC activity
- 2026-07-22 02:25:04
- Profile updated
- 2026-07-07 14:04:23
Targeted industries: technology-and-telecommunications retail-and-hospitality
Context
Aisuru is a honeypot-aware variant of Mirai that primarily targets IoT devices. It has been used in various botnets to launch distributed denial-of-service (DDoS) attacks.
Reports & references
- krebsonsecurity.com — Who Operates The Badbox 2 0 Botnet (report)
- spamhaus.org — Botnet Threat Update July To December 2025 (report)
- krebsonsecurity.com — The Kimwolf Botnet Is Stalking Your Local Network (report)
- krebsonsecurity.com — Who Benefited From The Aisuru And Kimwolf Botnets (report)
- blog.cloudflare.com — Ddos Threat Report 2025 Q4 (report)
- infoblox.com — Kimwolf Howls From Inside The Enterprise (report)
- synthient.com — A Broken System Fueling Botnets (report)
- krebsonsecurity.com — Kimwolf Botnet Lurking In Corporate Govt Networks (report)
- blog.xlab.qianxin.com — Kimwolf Botnet En (report)
- blog.apnic.net — Botnets Never Die (report)
- blog.xlab.qianxin.com — Large Scale Botnet Airashi (report)
- krebsonsecurity.com — Krebsonsecurity Hit With Near Record 6 3 Tbps Ddos (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Aisuru (report)
- blog.xlab.qianxin.com — Super Large Scale Botnet Aisuru En (report)
- gist.github.com — De6A7C14E68B5862734B94A3C10E574C (report)
- insights.oem.avira.com — New Mirai Variant Aisuru Detects Cowrie Opensource Honeypots (report)
- cyberch.com — Aisuru Botnet Shifts From Ddos To Residential Proxies (report)
- bleepingcomputer.com — Cloudflare Mitigates New Record Breaking 222 Tbps Ddos Attack (report)
- x.com — 1983679959924383956 (report)
- krebsonsecurity.com — Cloudflare Scrubs Aisuru Botnet From Top Domains List (report)
- forescout.com — Targeting Ot Security Ics Threats Malware (report)
- krebsonsecurity.com — Ddos Botnet Aisuru Blankets Us Isps In Record Ddos (report)
- krebsonsecurity.com — Aisuru Botnet Shifts From Ddos To Residential Proxies (report)
- cybernews.com — Steam Riot Gaming Services Hit By Disruptions Ddos Suspected (report)