Who is the Kimwolf Botmaster “Dort”?

Collection of KrebsOnSecurity reports (Jan–Feb 2026) documenting the rise and operations of the Kimwolf IoT botnet (＞2M devices) and related criminal activity: mass local-network compromise via vulnerable Android TV streaming boxes, widespread DDoS and abuse (including doxing, swatting), ties to other botnets (Badbox 2.0, Aisuru), disruption of the I2P anonymity network, and identification of the alleged botmaster ‘Dort’. Also coverage of a stealthy phishing-as-a-service called “Starkiller” that proxies real login pages to capture credentials and MFA codes, and multiple Microsoft Patch Tuesday