Who is the Kimwolf Botmaster “Dort”?

Between January–February 2026 KrebsOnSecurity published a series of investigations exposing the Kimwolf IoT botnet (now >2 million infected devices) and related activity: mass compromise of unofficial Android TV streaming boxes, propagation into corporate and government networks, takeover/interaction with the Badbox 2.0 botnet, and use of I2P to evade takedowns. The Kimwolf operators (handle “Dort”) have coordinated large-scale DDoS, doxing, email‑flooding and harassment campaigns (including swatting), and have leaked clues about affiliate beneficiaries. Separately, researchers identified a “h