Who is the Kimwolf Botmaster “Dort”?

Multiple KrebsOnSecurity investigations in Jan–Feb 2026 describe the rise of the Kimwolf IoT botnet ( >2 million devices) that mass‑compromises unofficial Android TV streaming boxes via a widespread vulnerability, scans local networks to propagate, and is used for massive DDoS, traffic relaying and doxing. Kimwolf actors claim compromise of the Badbox 2.0 control panel and have been leveraging I2P to evade takedowns, causing service disruption. The alleged botmaster “Dort” has conducted harassment, doxing and swatting against researchers. Separately, a new phishing‑as‑a‑service called “StarkiI