Who is the Kimwolf Botmaster “Dort”?

KrebsOnSecurity has exposed Dort, the elusive botmaster behind Kimwolf, reportedly the world's largest and most disruptive botnet. Dort has waged a relentless campaign of harassment, including DDoS attacks, doxing, and even swatting, against the security researcher who initially revealed Kimwolf's vulnerability, and the author.

Technical Breakdown

• Threat Actor: "Dort," the operator of the Kimwolf botnet.
• Initial Access: Kimwolf was assembled by exploiting a security vulnerability, details of which are not specified in the public summary.
• Tactics, Techniques, and Procedures (TTPs):
  • Distributed Denial of Service (DDoS): Coordinated large-scale denial-of-service attacks.
  • Doxing: Maliciously publishing private personal information of targets.
  • Email Flooding: Overwhelming targets with a high volume of unsolicited emails.
  • Physical Harassment: Orchestrated a "swatting" incident, sending a SWAT team to a researcher's home.
• Targets: Security researchers and journalists involved in exposing Kimwolf or its operations.

Defense

Individuals and organizations should prioritize strong personal and digital security practices, leverage DDoS mitigation services, and be vigilant against targeted harassment and social engineering attempts that can lead to doxing or swatting.

Source: https://krebsonsecurity.com/2026/02/who-is-the-kimwolf-botmaster-dort/