(krebsonsecurity.com) Unmasking Dort: The Threat Actor Behind the Kimwolf Botnet
-
(krebsonsecurity.com) Unmasking Dort: The Threat Actor Behind the Kimwolf Botnet
OSINT investigators have linked the operator of the Kimwolf botnet, known as "Dort," to Jacob Butler, a young Canadian from Ottawa, following a sustained retaliation campaign of doxing, swatting, and DDoS attacks against the researcher and journalist who publicly exposed the botnet. Kimwolf exploited vulnerabilities in residential proxy services to infect consumer IoT devices on internal networks. The attribution pivoted across breach tracking data from Constella Intelligence and Spycloud, domain records via DomainTools, cybercrime forum accounts indexed by Intel 471, and Telegram posts indexed by Flashpoint. Butler's prior activity includes ties to LAPSUS$, SIM swapping services, and CAPTCHA bypass tooling.
Source: https://krebsonsecurity.com/2026/02/who-is-the-kimwolf-botmaster-dort/
-
R relay@relay.infosec.exchange shared this topic
