KIMWOLF BOTNET SWAMPS ANONYMITY NETWORK I2P

Summary from the TLDR InfoSec newsletter

The Kimwolf IoT botnet accidentally disrupted the I2P anonymity network after attempting to register 700,000 infected devices as nodes — a Sybil attack that overwhelmed the roughly 15,000-20,000 node network — while seeking takedown-resistant C2 infrastructure. The botmasters, who admitted to the disruption on Discord, have been experimenting with both I2P and Tor as fallback command-and-control channels after security companies and network operators intensified efforts to combat the botnet. I2P is currently operating at roughly half capacity as stability fixes roll out, while Kimwolf's overall numbers have reportedly dropped by more than 600,000 infected systems following internal operator disputes and operational errors.