HTTP/2-Attacks for the Masses: Aisuru/Kimwolf is back
We have been tracking botnet capabilities for a long time now (see links below) to understand how they operate, what capabilities can be derived from
analysis
Tracking DDoS - Botnets
additional sources in botnet-tracking:
* Nokia Deepfield ERT
https://github.com/deepfield/public-research
Aisuru Botnet / aka Airashi / Kimwolf
what we know so far
* size:
SLEDGE HAMMER aka Edge Carpet Bombing: Exploiting CDN Infrastructure for Attack Amplification
TL;DR: Bypass rate limiting and attack detection while amplifying the payload sent to the target by a factor of 100 to 200.
💡The follow-
Layer-7 Bots capabilities (IoT vs PseudoBrowser vs Browser)
A comparison of IoT-Bots, Pseudobrowsers and Browserbots used in Layer-7-DDoS-Attacks
One HTTP/2 Bomb to break them all (CVE-2026-49975)
Yesterday, on June 3, 2026, calif_io published a blog post about a new HTTP/2 DoS technique that chains together two vulnerabilities and can