Who is the Kimwolf Botmaster “Dort”?

A series of KrebsOnSecurity reports detailing a major IoT threat landscape in early 2026: Kimwolf — a rapidly spreading IoT botnet (reported >2M devices) that scans local networks, powers massive DDoS, and uses I2P for C2 resilience — plus ties to Badbox 2.0 and Aisuru. The alleged Kimwolf operator (“Dort”) has coordinated harassment, doxing, email floods and even caused a SWAT incident. Separately, a stealthy phishing-as-a-service called “Starkiller” proxies real login pages and relays credentials and MFA codes to bypass take-downs and capture multi-factor authentication. Coverage also flags: