Black Lotus Labs Disrupts Over 550 C2 Servers Linked to AISURU and Kimwolf Android Botnets
cybersecuritybotnetDDoSAndroidmalwareC2_serversthreat_intelligenceLumen_TechnologiesBlack_Lotus_Labscyber_attack
Since early October 2025, Lumen Technologies' Black Lotus Labs team has neutralized over 550 command-and-control (C2) servers associated with the AISURU and Kimwolf (Android version) botnets. These botnets, among the most active recently, use compromised devices to launch distributed denial-of-service (DDoS) attacks. No details regarding the servers' locations or the number of infected devices were provided in this operation.