BleepingComputer · Sergiu Gatlan ·

US and Canadian authorities arrest 23-year-old Jacob Butler, known online as "Dort", for allegedly operating the Kimwolf DDoS botnet, which infected ~2M devices

U.S. and Canadian authorities arrested and charged a Canadian man with operating the KimWolf distributed denial-of-service …

US and Canadian authorities arrest 23-year-old Jacob Butler, known online as "Dort", for allegedly operating the Kimwolf DDoS botnet, which infected ~2M devices

Lead Source

How this story grew

Coverage · 0 Discussion · 0
May 22May 23

More

US Department of Justice: US Department of Justice
Krebs on Security: Krebs on Security
iPhone in Canada: iPhone in Canada
DeviceSecurity.io: DeviceSecurity.io
The Record: The Record
Cyber Security News: Cyber Security News
Security Affairs: Security Affairs
CyberInsider: CyberInsider
SecurityWeek: SecurityWeek
Help Net Security: Help Net Security
The Hacker News: The Hacker News
CyberScoop: CyberScoop

Discussion

TechSnif Coverage

Feds Bust 23-Year-Old Behind 2M-Device DDoS Botnet

US and Canadian authorities arrested the alleged operator of the KimWolf botnet that hijacked roughly 2 million devices.

Jacob Butler, a 23-year-old Canadian known online as "Dort," is in custody after a joint US-Canadian operation took him down. The charge: running the KimWolf distributed denial-of-service botnet.

KimWolf allegedly infected approximately 2 million devices, turning them into weapons for DDoS attacks. That's a massive zombie army by any standard.

Butler was arrested and charged by authorities on both sides of the border, signaling serious cross-border coordination on cybercrime enforcement.

DDoS botnets remain one of the most persistent threats on the internet. They hijack everyday devices — routers, IoT gadgets, poorly secured machines — and weaponize them to flood targets with traffic. At 2 million devices deep, KimWolf was no small operation.

The arrest sends a clear message: run a botnet, and eventually the feds come knocking.