Who is the Kimwolf Botmaster “Dort”?

KrebsOnSecurity coverage details a large, active IoT botnet cluster (Kimwolf) that has infected over two million devices, scans local networks to propagate, and is being used for massive DDoS, abuse-relay traffic and takedown-evasion (including leveraging I2P). The Kimwolf operators (handle “Dort”) have also conducted harassment campaigns—doxing, email floods and even causing a SWAT response—against researchers. Related reporting links Kimwolf to compromise of the Badbox 2.0 Android-TV ecosystem. Separately, a new phishing-as-a-service called “Starkiller” proxies real login pages and transparr