Feed aggregator

Canadian authorities on Wednesday arrested a 23-year-old Ottawa man on suspicion of building and operating Kimwolf, a fast spreading Internet-of-Things botnet that enslaved millions of devices for use in a series of massive distributed denial-of-service (DDoS) attacks over the past six months. KrebsOnSecurity publicly named the suspect in February 2026 after the accused launched a volley of DDoS, doxing and swatting campaigns against this author and a security researcher. He now faces criminal hacking charges in both Canada and the United States.

A criminal complaint unsealed today in an Alaska district court charges Jacob Butler, a.k.a. “Dort,” of Ottawa, Canada with operating the Kimwolf DDoS botnet. A statement from the Department of Justice says the complaint against Butler was unsealed following the defendant’s arrest in Canada by the Ontario Provincial Police pursuant to a U.S. extradition warrant. Butler is currently in Canadian custody awaiting an initial court hearing scheduled for early next week.

The government said Kimwolf targeted infected devices which were traditionally “firewalled” from the rest of the internet, such as digital photo frames and web cameras. The infected systems were then rented to other cybercriminals, or forced to participate in record-smashing DDoS attacks, as well as assaults that affected Internet address ranges for the Department of Defense. Consequently, the DoD’s Defense Criminal Investigative Service is investigating the case, with assistance from the FBI field office in Anchorage.

“KimWolf was tied to DDoS attacks which were measured at nearly 30 Terabits per second, a record in recorded DDoS attack volume,” the Justice Department statement reads. “These attacks resulted in financial losses which, for some victims, exceeded one million dollars. The KimWolf botnet is alleged to have issued over 25,000 attack commands.”

On March 19, U.S. authorities joined international law enforcement partners in seizing the technical infrastructure for Kimwolf and three other large DDoS botnets — named Aisuru, JackSkid and Mossad — that were all competing for the same pool of vulnerable devices.

On February 28, KrebsOnSecurity identified Butler as the Kimwolf botmaster after digging through his various email addresses, registrations on the cybercrime forums, and posts to public Telegram and Discord servers. However, Dort continued to threaten and harass researchers who helped track down his real-life identity and dramatically slow the spread of his botnet.

Dort claimed responsibility for at least two swatting attacks targeting the founder of Synthient, a security startup that helped to secure a widespread critical security weakness that Kimwolf was using to spread faster and more effectively than any other IoT botnet out there. Synthient was among many technology companies thanked by the Justice Department today, and Synthient’s founder Ben Brundage told KrebsOnSecurity he’s relieved Butler is in custody.

“Hopefully this will end the harassment,” Brundage said.

An excerpt from the criminal complaint against Butler, detailing how he ordered a swatting attack against Ben Brundage, the founder of the security firm Synthient.

The government says investigators connected Butler to the administration of the KimWolf botnet through IP address, online account information, transaction records, and online messaging application records obtained through the issuance of legal process. The criminal complaint against Butler (PDF) shows he did little to separate his real-life and cybercriminal identities (something we demonstrated in our February unmasking of Dort).

In April, the Justice Department joined authorities across Europe in seizing domain names tied to nearly four-dozen DDoS-for-hire services, although because of a bureaucratic mix-up the list of seized domains has remain sealed until today. The DOJ said at least one of those services collaborated with Butler’s Kimwolf botnet.

A statement from the Ontario Provincial Police said a search warrant was executed on March 19 at Butler’s address in Ottawa, where they seized multiple devices. As a result of that investigation, Butler was arrested and charged this week with unauthorized user of computer; possession of device to obtain unauthorized use of computer system or to commit mischief; and mischief in relation to computer data. He is scheduled to remain in custody until a hearing on May 26.

In the United States, Butler is facing one count of aiding and abetting computer intrusion. If extradited, tried and convicted in a U.S. court, Butler could face up to 10 years in prison, although that maximum sentence would likely be heavily tempered by considerations in the U.S. Sentencing Guidelines, which make allowances for mitigating factors such as youth, lack of criminal history and level of cooperation with investigators.

COLUMBUS, Ohio (WCMH) -- Amid allegations of Medicaid fraud, the Ohio House is adding five more members to its Medicaid Committee. The House Medicaid Committee appointed three new Republicans and two new Democrats as an effort to impose reform on the state's Medicaid programs. The appointments come amid a statewide crackdown on Medicaid fraud, with [...]

COLUMBUS, Ohio (WCMH) -- The Wexner Center for the Arts is marking Pride Month with a film series highlighting LGBTQ+ stories, filmmakers and restored classics. "Pride: A Celebration of Queer Movies" runs May 27 through June 26 at the arts center located at 1871 N. High St. on Ohio State University's campus. The lineup includes [...]

The Ohio Department of Transportation released its travel forecast for the 2026 Memorial Day weekend, letting drivers know when the best and worst times are expected to be.

HILLIARD, Ohio (WCMH) – A smokehouse that has been serving customers in Hilliard for more than seven years will soon close its doors. Legacy Smokehouse at 3987 Main St. will shutter on May 31, according to a news release from the restaurant and The Westwood Collective, a Hilliard-based real estate development firm that owns the [...]

COLUMBUS, Ohio (WCMH) — A man has been arrested in connection with a shooting that resulted in “catastrophic” injuries in northwest Columbus. The victim was reported shot at 3:45 a.m. Wednesday in the 6400 block of Cranston Way in the Riverside neighborhood, near Dublin. Officers arrived at a Riverside Green Apartment residence and discovered a male [...]

COLUMBUS, Ohio (WCMH) - Meet Flower! She is up for adoption at the Franklin County Dog Shelter and Adoption Center. Flower is a one-year-old mixed breed who is described as a sweet, shy girl. When she came into the shelter as a stray, she was timid. The shelter's team has been working with her to [...]

Memorial Day weekend in central Ohio is packed with events, from sports and live music to festivals and family-friendly activities, including the Columbus Clippers, Fleetwood Gold, Lynd Fruit Farm, Jeni's Strawberry Jam Festival, FountainFest, Ohio Black Expo, Columbus Maennerchor Maifest, and the Columbus Crew.

PORTSMOUTH, Ohio (WCMH) -- An 18-year-old special education student claims she was denied the remaining months of her senior year after her school rejected her doctor's note and refused to let her carry a backpack. Iliana Holbrook graduated from Minford High School five months early after the district banned backpacks, preventing Holbrook from attending. Holbrook [...]

COLUMBUS, Ohio (WCMH) – About 15,300 children were reported missing in Ohio last year, continuing a downward trend in cases, according to a recently released report.  Ohio Attorney General Dave Yost on Monday issued the state's annual Missing Children Clearinghouse Report, which covers data and statistics from 2025. The report found that a total of [...]

COLUMBUS, Ohio (WCMH)  – The city of Columbus is adopting a new policy advocates said will make roads more accessible and safer. For one cyclist, the change is personal. Lifelong cyclist Kimber Perfect said she was following the rules while riding her bike on the road when she was hit by a car. “I actually [...]

COLUMBUS, Ohio (WCMH) -- Leaders at Columbus City Schools said student attendance will remain a priority even after the district voted to eliminate nearly 300 jobs as part of millions of dollars in budget cuts. The Columbus Board of Education voted Tuesday night to eliminate 299 staff positions, totaling $25.9 million in cuts. District leaders [...]

COLUMBUS, Ohio (WCMH) -- Ohioans are already required by state law to present photo identification whenever they vote, but now, Republican legislators want to amend the state constitution, making the requirement permanent. Republican House and Senate leaders introduced joint resolutions on Wednesday to put a referendum on the November ballot, asking voters to add a [...]

COLUMBUS, Ohio (WCMH) -- Franklin County Public Health is reporting a recent increase in deadly overdoses. Officials say six people died in a 24-hour period before making a post on May 15. Health officials say any time they see five or more overdoses in a 24 hour period, it is concerning. “It really pushes us to [...]

COLUMBUS, Ohio (WCMH) – A new pumper truck is on its way to the Columbus Division of Fire, but it won’t arrive for nearly two years, and it won’t be enough to stave off what firefighters called an “imminent crisis.” The International Association of Firefighters said Columbus is just one of a growing number of [...]

GROVE CITY, Ohio (WCMH) – One Grove City family has been battling the impacts of severe weather for more than a year. They’re trying to get their roof replaced after hail left it covered with dents and holes, but their insurance company says only a repair is necessary. So they called Better Call 4, and [...]

COLUMBUS, Ohio (WCMH) -- The CDC and public health officials are investigating multi-state outbreaks of salmonella, including five people in Ohio. Dr. Joanna Failor with OhioHealth noted the outbreak of salmonella illnesses is linked to contact with backyard poultry. “The current strain that they're seeing is related to the backyard chickens that many of us may have or our neighbors have,” Failor [...]

Fast food chain Wendy's announced Wednesday its new president and chief executive officer.