Indeed, Rapper Bot was reportedly responsible for the March 10, 2025 attack that caused intermittent outages on Twitter/X. The complaint notes the DCIS got involved because several Internet addresses maintained by the DoD were the target of Rapper Bot attacks. A subpoena to Google showed the defendant searched security blogs constantly for news about Rapper Bot, and for updates about competing DDoS-for-hire botnets. The government states that just prior to Foltz’s arrest, Rapper Bot had enslaved an estimated 65,000 devices globally. According to the government, Rapper Bot borrows much of its code from fBot, a DDoS malware strain also known as Satori.