The College Student Who Defeated the World’s Biggest Cyberweapon

Where this was said

The Takedown: Ben Warns the World, Google and DOJ Act

At 33:20 · chapter starts 30:55

With the exploit understood, Ben moved to warn the industry. He identified 10 other residential proxy companies vulnerable to the same bug IP Idea had ^{[1] — Jessica Mendoza "Bug found in 11 proxy companies: Ben Brundage discovered that not only IP Idea but 10 other residential proxy companies were also vulnerabl…" 31:15 Play} . As his final exams loomed, he drafted notifications to all of them, sending the emails on December 17th — the day after his last test ^{[2] — Jessica Mendoza "10 million pre-installed devices: Google identified more than 10 million devices that came with IP Idea's software secretly pre-installed o…" 32:50 Play} . IP Idea replied 9 days later, claiming the email had gone to spam and promising a fix. It was too little, too late. In January, Google obtained a US court order and moved decisively: 13 of IP Idea's business domains were taken down and dozens of its servers were shut off. Google had by then identified over 10 million devices pre-installed with IP Idea's software. Two months later, in March, the Department of Justice struck against four of the world's largest DDoS botnets, including KimWolf — seizing domains, virtual servers, and network infrastructure. At the end of the DOJ press release was a list of companies thanked for their help. Among the major tech firms was Synthient: Ben's one-man startup, operating out of a college dorm room.

Technology

Bug found in 11 proxy companies

The College Student Who Defeated the World’s Biggest Cyberw… · May 1, 2026

Ben Brundage discovered that not only IP Idea but 10 other residential proxy companies were also vulnerable to the same bug exploited by KimWolf.

31:15 – 31:40

♥ 0

Government

Google and the DOJ Take Down KimWolf

The College Student Who Defeated the World’s Biggest Cyberw… · May 1, 2026 Government

In January, Google obtained a US court order to shut down 13 of IP Idea's business domains and dozens of its servers. Two months later, the DOJ struck against four major DDoS botnets including KimWolf, seizing domains and infrastructure — and thanked Ben's startup Synthient in the press release.

32:20

34:25

2m 5s

♥ 0

Technology

10 million pre-installed devices

The College Student Who Defeated the World’s Biggest Cyberw… · May 1, 2026

Google identified more than 10 million devices that came with IP Idea's software secretly pre-installed on them.

32:50 – 33:15

♥ 0

Government

DOJ seized domains in March 2025

The College Student Who Defeated the World’s Biggest Cyberw… · May 1, 2026

Two months after Google's action, the DOJ struck against four of the world's largest DDoS botnets, including KimWolf, seizing domains, servers, and network infrastructure.

33:25 – 34:00

♥ 0

“

Ben was the most important, critical MVP, whatever you want to call it.

Chris Formosa

The College Student Who Defeated the Wo…

♥ 0

Technology

KimWolf still lurks in thousands of devices

The College Student Who Defeated the World’s Biggest Cyberw… · May 1, 2026

Despite the DOJ and Google takedowns, cybersecurity experts say KimWolf is still active, lurking in thousands of vulnerable consumer devices.

34:20 – 34:45

♥ 0