Who is the Kimwolf Botmaster “Dort”?

A series of KrebsOnSecurity reports from early 2026 documents the rise and impact of the Kimwolf IoT botnet (over 2 million infected devices), which spreads by mass-compromising unofficial Android TV streaming boxes, scans local networks for new victims, and is being used for massive DDoS, doxing, email-flooding and other abusive traffic. Kimwolf operators have leveraged anonymity infrastructure (I2P) to evade takedowns, claimed access to the Badbox 2.0 control panel, and personally targeted researchers (harassment, SWATting). Related coverage highlights a stealthy phishing-as-a-service called