Who is the Kimwolf Botmaster “Dort”?
Summary
This article investigates the identity of "Dort," the individual believed to be the botmaster behind Kimwolf, a massive botnet responsible for significant disruptive attacks. Following the disclosure of a vulnerability that enabled the creation of Kimwolf, Dort has orchestrated retaliatory DDoS, doxing, and harassment campaigns against those involved in exposing the botnet.
IFF Assessment
The botmaster is actively engaging in disruptive and harmful cyber activities, posing a direct threat to individuals and potentially other organizations.
Defender Context
This case highlights the persistent threat posed by sophisticated botnets and the risks associated with identifying and exposing threat actors. Defenders should remain vigilant against retaliatory attacks and consider the operational security implications when investigating or disrupting cybercrime operations.