Kimwolf

☆ pin

Also known as Aisuru

Reports

First seen

Feb 2, 2026

Last seen

Aug 12, 2026

Motivation

Financial

Targeting

Sectors

Other ×1

Top ATT&CK techniques

T1498 Network Denial of Service ×2T1195 Supply Chain Compromise ×1T1486 Data Encrypted for Impact ×1T1566 Phishing ×1T1027 Obfuscated Files or Information ×1T1003 OS Credential Dumping ×1T1204 User Execution ×1T1041 Exfiltration Over C2 Channel ×1T1190 Exploit Public-Facing Application ×1T1071 Application Layer Protocol ×1T1555 Credentials from Password Stores ×1T1090 Proxy ×1

Indicators

cve ×6domain ×2filename ×1

Indicator values are available on Pro and via the API.

Associated CVEs

CVE-2025-53690 (exploited)CVE-2025-64155 CVE-2025-8088 (exploited)CVE-2026-1281 (exploited)CVE-2026-20045 (exploited)CVE-2026-21509 (exploited)

Recent reports

High

Kimwolf botnet rebuilt with HTTP/2 DDoS and Ethereum-based C2 to evade takedowns

CyberScoopAug 12, 2026 High

Feds Disrupt IoT Botnets Behind Huge DDoS Attacks

KrebsOnSecurityMar 20, 2026 High

CERT-EU Cyber Brief January 2026 – Espionage, Ransomware, and Critical Vulnerabilities

CERT-EU Threat IntelFeb 2, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.