BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.balticnog.org//bnog-2026//PKSECJ
BEGIN:VTIMEZONE
TZID:EET
BEGIN:STANDARD
DTSTART:20000101T000000
RRULE:FREQ=YEARLY;BYMONTH=1;UNTIL=19991231T220000Z
TZNAME:EET
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:STANDARD
BEGIN:STANDARD
DTSTART:20011028T050000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:EET
TZOFFSETFROM:+0300
TZOFFSETTO:+0200
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20010325T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:EEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0300
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bnog-2026-YZ97TP@pretalx.balticnog.org
DTSTART;TZID=EET:20260924T170000
DTEND;TZID=EET:20260924T172500
DESCRIPTION:Modern DDoS botnets have evolved far beyond the original Mirai 
 model. Kimwolf and Aisuru leverage large populations of compromised IoT de
 vices and residential connectivity to generate attacks reaching approximat
 ely 30 Tbps and billions of packets per second\, often sending traffic dir
 ectly from infected devices without relying on traditional amplification.\
 n\nThis presentation examines how these botnets evolved\, how their comman
 d-and-control infrastructure operates\, and the impact their attacks have 
 not only on the targeted network\, but also on every ASN carrying the traf
 fic along the path. We will look at real-world mitigation approaches\, inc
 luding what failed\, what helped\, and why simply adding bandwidth or depl
 oying traditional DDoS mitigation may not be enough at this scale. The pre
 sentation concludes with practical lessons from operators\, including C2 d
 isruption\, trusted cross-network collaboration\, and the role infrastruct
 ure takedowns and law-enforcement action can play in stopping attacks at t
 heir source.
DTSTAMP:20260920T202614Z
LOCATION:ROOM ALFA
SUMMARY:Massive DDOS attacks on ISPs – A look into Kimwolf and Aisuru - S
 cott Fisher
URL:https://pretalx.balticnog.org/bnog-2026/talk/YZ97TP/
END:VEVENT
END:VCALENDAR