AisuruMalware
Honeypot-aware variant of Mirai.From MISP Galaxy
Last reported 8 days ago, by Help Net Security2 reports
ATT&CK techniques
3 techniques · each with the sentence it comes from- T1195Supply Chain Compromise
“Supply-chain compromise of Trivy vulnerability scanner”
- T1218.002Control Panel
“DDoS-for-hire services offer subscription plans, free trials, method catalogues and control panels with preconfigured settings that reduce the technical effort needed to launch attacks.”
- T1684Social Engineering
“The group impersonated Iraq's Ministry of Foreign Affairs using social engineering lures, including ClickFix-style attacks, to deploy several .NET malware families.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
2 reports, newest first · the exact sentence from each-
DDoS attacks can knock services offline before links reach capacity“Much of that growth came from botnet operators associated with Aisuru, Kimwolf, Jackskid, and their successors.”
-
Cyber Brief 26-04 - March 2026“On March 20, a joint global law enforcement operation including the US, Germany, and Canada, disrupted the Aisuru, Kimwolf, Jackskid and Mossad botnets, whose malware droppers infected thousands of devices.”
Thanks — we review every report.