Kimwolf Botnet Lurking in Corporate, Govt. Networks
Summary
Krebs on Security reports that the Kimwolf IoT botnet has infected more than 2 million devices by using residential proxies to relay commands and scan local networks for additional vulnerable devices. The malware primarily spreads via Android TV boxes with pre-installed proxy software, affecting government, education, healthcare, and finance sectors. Analyses from Infoblox, Synthient, and Spur reveal widespread proxy exposure and government network risk, highlighting the need for improved network segmentation and monitoring.