A primary-source history of Mirai: the 62-credential telnet worm of 2016, the record 623 Gbps hit on Krebs and the terabit OVH flood, the Dyn outage, the HackForums source leak, and the three students behind it.
How fast flux rotates A and NS records over a bot proxy layer to hide C2 and phishing infrastructure, the flux-score and TTL signals that detect it, and what the 2025 CISA advisory adds.
A primary-source history of the botnet, from 1990s IRC bots and the EarthLink Spammer through Storm, Conficker, Zeus, Mirai's IoT swarm, and the residential-proxy networks that now launder scraping and fraud.