Who is the Kimwolf Botmaster “Dort”?

Multiple KrebsOnSecurity reports (Jan–Feb 2026) describe a severe, active threat landscape centered on Kimwolf — a massive IoT botnet (reported >2 million devices) that spreads via compromised Android TV streaming boxes and local-network scanning, and has been used for large-scale DDoS, doxing, email‑flooding and to evade takedowns by abusing anonymity networks (I2P). Kimwolf actors reportedly commandeered or interacted with other botnets (Badbox 2.0) and have harassed researchers (including swatting). Separately, a new phishing-as-a-service called “Starkiller” transparently proxies real login