Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

AI Summary

Palo Alto Networks Unit 42 discovered Kimwolf v7 in February 2026, revealing that the Android/IoT botnet — previously disrupted by law enforcement — rebuilt itself with HTTP/2-based DDoS traffic that mimics legitimate Chrome browser activity and fetches command-and-control orders from the Ethereum blockchain. This dual-layer evasion (traffic disguise plus decentralized C2) directly counters both signature-based detection and infrastructure seizure tactics used in prior takedowns.

Read full article → https://thehackernews.com/2026/08/kimwolf-v7-andro…

Relevance score: 86.0/100

# More from August 12

1
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack The Hacker News
2
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks The Hacker News
3
DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt The Hacker News
5
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE The Hacker News
6
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client The Hacker News
7
Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine The Hacker News
8
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands The Hacker News
9
Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers The Hacker News
10
A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices The Hacker News