Chrome Fingerprint Spoofing Makes Kimwolf HTTP/2 Floods Harder to Separate From Real Users

A newly identified version of the Kimwolf botnet is making distributed denial-of-service attacks harder to detect by making malicious traffic look like ordinary Chrome browser activity. Known as Kimwolf v7, the Android and IoT malware adds an HTTP/2 flood capability that builds browser-like request fingerprints, making it more difficult for defenders to separate attack traffic from real users. Kimwolf mainly targets Android TV boxes and set-top boxes. It is linked to the…