logo

Suspected KimWolf botnet admin arrested over DDoS-for-hire operation

ID: 4308bc5a-8d5b-51f6-a1d3-55f63a2c9476

STIX ID: report--4308bc5a-8d5b-51f6-a1d3-55f63a2c9476

Feed Name: Help Net Security

Threat Score
80/100

Date Published: 2026-05-22

Date Updated: 2026-05-22

Author: Sinisa Markovic

...
...

U.S. and Canadian authorities arrested Jacob Butler, alleged operator of the KimWolf DDoS botnet, which compromised over one million mainly IoT devices (digital photo frames, webcams, DVRs) and was offered as a DDoS-for-hire service; attacks reached nearly 30 Tbps and issued over 25,000 commands. Law enforcement linked Butler through IP, account, transaction and messaging records and coordinated seizures that disrupted multiple DDoS platforms and related botnets.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.