Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Browse News Feed Stats Watchlists Beta About Contact

Jacob Butler Kimwolf arrest and cross-border charges

Law Enforcement
First reported
Last updated
Happening score
H score 15
2 unique sources, 2 articles

Summary

Hide ▲

Canadian authorities arrested Jacob Butler (“Dort”) in Ottawa over the Kimwolf DDoS botnet case. The move escalates a cross-border cybercrime prosecution that also includes an unsealed U.S. complaint and an extradition warrant. Investigators say Kimwolf powered massive distributed denial-of-service attacks, including traffic measured at nearly 30 Terabits per second. The arrest matters because the botnet allegedly caused million-dollar losses and remains tied to an ongoing effort to dismantle its operators and infrastructure.

Related Happenings

Kimwolf operators build a cybercrime-as-a-service DDoS access market

Threat Actor Meta
First: 22.05.2026 11:50 Last: 22.05.2026 11:50 Sources 1

How related: The operators then used a 'cybercrime-as-a-service' model to sell access to the infected devices to other cybercriminals.

About this happening: The **Kimwolf** operators ran a **cybercrime-as-a-service** market that sold access to infected devices, widening **DDoS-for-hire** abuse. The model turned compromised **digital p...

Open Happening

Dort-linked DDoS, doxing, and swatting campaign against researchers

Campaign
First: 22.05.2026 00:50 Last: 22.05.2026 00:50 Sources 1

How related: after the accused launched a volley of DDoS, doxing and swatting campaigns against this author and a security researcher.

About this happening: The **Dort**-linked harassment campaign targeted **this author and a security researcher**, using **DDoS, doxing, and swatting** to intimidate the people investigating the operato...

Open Happening

Finnish arrest and U.S. charges in Bouquet Scattered Spider case

Law Enforcement
First: 28.04.2026 18:39 Last: 28.04.2026 18:39 Sources 1

About this happening: **Finnish law enforcement** arrested **Bouquet**, and **U.S. federal prosecutors** later charged him in a cross-border **Scattered Spider** cybercrime case. The charges include **...

Open Happening

Aisuru, KimWolf, JackSkid, and Mossad botnet C2 takedown

Law Enforcement
First: 20.03.2026 10:05 Last: 20.03.2026 10:05 Sources 1

How related: The charges come exactly two months after U.S. authorities, in partnership with Canada and Germany, disrupted the command-and-control (C2) infrastructure associated with Kimwolf, AISURU, JackSkid, and Mossad as part of a court-authorized law enforcement operation.

About this happening: The **U.S. Department of Justice** announced the arrest of **Jacob Butler (aka Dort)**, a **23-year-old** in **Ottawa, Canada**, for allegedly developing and operating the **Kimwo...

Open Happening

Derrick Van Yeboah guilty plea in romance-fraud and BEC wire case

Law Enforcement
First: 09.03.2026 12:00 Last: 09.03.2026 12:00 Sources 1

About this happening: **Derrick Van Yeboah** pleaded guilty to **conspiracy to commit wire fraud** in a case tied to **romance fraud** and **business email compromise (BEC)**. The plea deepens criminal...

Open Happening

Timeline

  1. 22.05.2026 00:50 1 articles · 6d ago

    Security publication identifies Dort as Kimwolf botmaster

    Initial Disclosure

    A security publication identified Jacob Butler, also known as Dort, as the Kimwolf botmaster after linking email addresses, cybercrime-forum registrations, and posts to public Telegram and Discord servers, while Butler continued DDoS, doxing, and swatting campaigns against the author and a security researcher.

    Show sources
    Open in new tab
  2. 22.05.2026 00:50 1 articles · 6d ago

    March 19 seizures target Kimwolf infrastructure and related devices

    Campaign Scope Update

    On March 19, authorities seized the technical infrastructure for Kimwolf and three other large DDoS botnets — Aisuru, JackSkid and Mossad — while a search warrant executed at Butler's Ottawa address led to the seizure of multiple devices.

    Show sources
    Open in new tab
  3. 22.05.2026 00:50 2 articles · 6d ago

    Ottawa arrest and U.S./Canada charges against Butler

    Legal Policy Action Update

    Canadian authorities arrested Jacob Butler, also known as Dort, in Ottawa pursuant to a U.S. extradition warrant, and an Alaska district court unsealed a criminal complaint charging him with operating the Kimwolf DDoS botnet while Ontario police charged him with unauthorized use of a computer, possession of a device to obtain unauthorized use of a computer system or to commit mischief, and mischief in relation to computer data.

    Show sources
    Open in new tab