Who is the Kimwolf Botmaster “Dort”?

This collection of KrebsOnSecurity posts details multiple high-impact threats from early 2026. The Kimwolf IoT botnet has infected over two million devices, scans local networks to spread, is being used for massive DDoS, abusive relays, and evasion via I2P, and is implicated in compromises of other botnets (Badbox 2.0) and ties to Aisuru; the alleged Kimwolf operator (“Dort”) and the botnet’s role in doxxing, harassment and even SWATing are examined. A new phishing-as-a-service called “Starkiller” proxies legitimate sites to capture credentials and MFA codes in real time, making takedowns and