Canadian and U.S. authorities arrested a 23-year-old Ottawa resident accused of building and operating Kimwolf, an IoT botnet responsible for large-scale DDoS attacks targeting millions of devices over six months. The suspect, known online as "Dort," faces criminal hacking charges in both jurisdictions.

Kimwolf spread rapidly across compromised internet-connected devices, converting them into attack nodes for distributed denial-of-service operations. The botnet's scale enabled the operator to conduct DDoS attacks of significant magnitude. The suspect allegedly used the infected infrastructure to launch additional harassment campaigns including doxing and swatting attacks.

KrebsOnSecurity publicly identified the suspect in February 2026 after he directed DDoS, doxing, and swatting operations against the publication's reporter and a security researcher. The coordinated harassment marked an escalation beyond typical botnet monetization, suggesting the operator combined botnet-for-hire capability with targeted personal attacks.

IoT botnets remain a persistent threat because billions of connected devices run outdated firmware without security patches. Default credentials, unpatched vulnerabilities, and weak authentication mechanisms allow attackers to quickly compromise routers, IP cameras, smart home devices, and other connected hardware. Once enslaved, these devices become invisible attack infrastructure difficult for victims to trace.

DDoS-for-hire services built on botnets generate revenue through extortion and competitive disruption, typically targeting online gambling sites, cryptocurrency exchanges, and critical infrastructure. The shift toward personal harassment campaigns represents a troubling evolution in botnet operator tactics, combining technical capability with deliberate targeting of security researchers and journalists.

The arrest disrupts Kimwolf operations but reflects a broader enforcement challenge. Botnet operators often operate across borders, making prosecution complex. The dual charges in Canada and the U.S. suggest coordination between law enforcement agencies to