Four DDoS-as-a-service botnets (Aisuru, KimWolf, JackSkid, Mossad) were dismantled by multinational law enforcement, but over three million compromised IoT devices (IP cameras, DVRs, WiFi routers; ASUS router models implicated but specific models unconfirmed) remain a residual risk as C2 infrastructure seizure does not remediate device-level infections. The Aisuru botnet recorded a 31.4 Tbps attack sufficient to strain commercial DDoS scrubbing capacity including Akamai infrastructure, and the botnets targeted DoDIN. Organizations should audit internet-facing IoT devices for default and hard-coded credentials, verify DDoS mitigation provider capacity thresholds, and implement network segmentation isolating IoT devices from critical infrastructure.