Who is the Kimwolf Botmaster “Dort”?

Collection of KrebsOnSecurity reports (Jan–Feb 2026) describing the rise and impact of the Kimwolf IoT botnet (over 2M infected devices) that mass‑compromises Android TV streaming boxes, conducts large DDoS campaigns, relays abusive traffic, and has been used for doxing, SWATing and harassment. Coverage includes investigation into the alleged Kimwolf botmaster (“Dort”), Kimwolf’s use of the I2P anonymity network to evade takedowns, and evidence the Kimwolf operators compromised the Badbox 2.0 control panel. Separate reporting details a new phishing‑as‑a‑service called “Starkiller” that proxies