The College Student Who Defeated the World’s Biggest Cyberweapon

The massive Kimwolf botnet, which hijacked nearly two million consumer devices globally to launch large-scale distributed denial-of-service (DDoS) attacks, was dismantled through the critical investigative work of college student Benjamin Brundage. By setting up a honeypot, Brundage identified that hackers were exploiting vulnerabilities in residential proxy networks to gain unauthorized access to everyday internet-connected appliances like cameras and TV boxes. This discovery revealed that these devices were being weaponized for cybercrime, often without the owners' knowledge. The findings enabled a coordinated response from cybersecurity groups, Google, and the Department of Justice, resulting in the seizure of infrastructure and the neutralization of the botnet. This operation underscores the systemic risks posed by insecure, pre-installed software in consumer electronics, which increasingly serves as a foundation for global criminal infrastructure.