Canadian authorities arrested 23-year-old Jacob Butler (alias 'Dort') of Ottawa, charging him with building and operating the Kimwolf IoT botnet. The botnet enslaved millions of devices — including digital photo frames and webcams — and was used to launch DDoS attacks peaking at nearly 30 Tbps, a record volume, resulting in over $1 million in losses for some victims and more than 25,000 attack commands issued. Butler also faces U.S. federal charges of aiding and abetting computer intrusion, with potential extradition. Investigators linked him to the botnet via IP addresses, account records, and transaction data. The case also involves related seizures of three other botnets (Aisuru, JackSkid, Mossad) and dozens of DDoS-for-hire domains. Butler had previously targeted KrebsOnSecurity's author and a security researcher with DDoS, doxing, and swatting attacks after being publicly identified in February 2026.
Sort: