A coordinated U.S., German, and Canadian law enforcement operation dismantled four DDoS-for-hire botnets, Aisuru, KimWolf, JackSkid, and Mossad, that had compromised over 3 million IoT devices and issued more than 315,000 attack commands. The Aisuru botnet reached a recorded peak of 31.4 Tbps in December 2025 targeting U.S. DoD infrastructure; other targets included telecommunications providers and cloud DDoS mitigation services. While C2 infrastructure has been disrupted, the 3 million compromised endpoints remain at risk of re-enrollment into successor botnets unless remediated at the device level.