Krebs on Security is a cybersecurity blog authored by Brian Krebs, an investigative journalist and cybersecurity expert. With a focus on cybercrime, hacking incidents, and data breaches, Krebs on Security provides  analysis, investigative reporting, and security research on emerging threats and cybersecurity trends. Developers and security professionals can learn about the latest cybersecurity threats, security best practices, and incident response strategies from Krebs' investigative reporting and expert analysis.

Krebs on Security

An investigative piece tracing the real-world identity of 'Dort,' the operator behind the Kimwolf botnet — described as the world's largest and most disruptive botnet. Using OSINT tools including Constella Intelligence, DomainTools, Flashpoint, Intel 471, and Epieos, the author links the handle Dort to Jacob Butler, a Canadian from Ottawa born in August 2003. The investigation connects multiple aliases (CPacket, M1CE, DortDev), email addresses, cybercrime forum accounts, and Minecraft-related activity spanning from 2015 onward. Dort is also linked to LAPSUS$ chat activity, SIM-swapping services, CAPTCHA bypass tools, and theft of Xbox Game Pass accounts. The post also details retaliatory DDoS, doxing, and swatting attacks Dort launched against the security researcher who exposed the Kimwolf vulnerability.

Who is the Kimwolf Botmaster “Dort”? – Krebs on Security