Kimwolf Android botnet abuses residential proxies to infect internal devices
More than two million hosts are now part of the Kimwolf botnet, an Android version of the Aisuru virus that targets devices on internal networks by taking advantage of flaws in home proxy networks.
Since last August, researchers have noticed a rise in the malware's activities. In order to find devices with accessible Android Debug Bridge (ADB) services, Kimwolf has increased its proxy network scanning throughout the last month.
TV boxes and streaming devices running Android that permit unauthenticated access over ADB are frequently targeted. Distributed denial-of-service (DDoS) assaults, proxy resale, and monetizing app downloads through third-party SDKs like Plainproxies Byteconnect are the main uses for compromised devices.
The highest known DDoS attack, which peaked at 29.7 te...