2 September 2026
On 31 August, independent Kyrgyz news outlet Kloop.kg was targeted by a massive seven-hour DDoS attack that generated an estimated 50TB of malicious traffic — equivalent to roughly 15 years of the website’s normal traffic volume.
Qurium’s Forensic Lab analyzed a 10 TB sample of the attack, containing approximately three million network flows and close to 15,000 observed source IP addresses. The analysis shows that this was not a simple volumetric flood, but a coordinated multi-vector attack combining GRE, TCP/HTTPS, UDP and TCP ACK flooding.
The attack profile strongly resembled the documented capabilities of Aisuru/TurboMirai-class IoT botnets. After we shared our preliminary analysis with third party intelligence sources, we could confirm that the attack was conducted by the Aisuru botnet.
The attack comes amid years of pressure on Kloop for its independent reporting on corruption and abuses of power in Kyrgyzstan. Its websites were blocked in 2023, its Kyrgyz legal entity was ordered liquidated in 2024, and current and former staff were detained in 2025.
Kloop’s co-founder and CTO, Rinat Tuhvatshin, is not sure how to interpret the DDoS attack against their news site. “DDoSing an already blocked site — an act of desperation? Whatever the reason, it illustrates what media outlets have to deal with online these days: state blocks, false copyright claims on social media, and good old DDoS attacks.”
Read the full forensic analysis: A 50TB hug to Kloop Media: Forensic analysis of the DDoS attack targeting Kloop.kg
Qurium Media Foundation is an international non-profit organization that provides secure hosting, digital forensics, incident response, and infrastructure protection for journalists, human rights defenders, and public-interest media organizations worldwide. Its investigations focus on censorship, surveillance, digital attacks, and the infrastructures that enable them. Learn more at qurium.org.
Press Contacts
Digital Forensics
Tord Lundström <t at virtualroad.org>
Technical Director
Media Contact
ClaraZid <info at virtualroad.org>
Outreach and Media manager