Kimwolf DDoS Botnet Operator Arrested in Canada

A 23-year-old man from Ottawa, Canada, was arrested on Thursday by the U.S. Department of Justice (DoJ). Jacob Butler, also known by the alias Dort, is accused of operating a distributed denial-of-service (DDoS) botnet named Kimwolf. The arrest is part of a comprehensive investigation into DDoS attacks targeting a variety of victims. The Kimwolf botnet is classified as a variant of the AISURU botnet, which is known for its ability to conduct massive DDoS attacks capable of significantly disrupting the servers of businesses and organizations.

U.S. authorities have determined that Kimwolf was specifically developed for DDoS attacks against paying customers. Investigations revealed that Butler advertised his DDoS services across various online platforms. Customers could commission attacks on specific targets for a fee, with prices varying based on the scope and duration of the attack. In recent months, U.S. authorities have targeted several such DDoS-for-hire services.

Butler's arrest is part of a larger initiative to combat cybercrime. U.S. authorities are working closely with international partners to identify and hold accountable the operators of such botnets. This collaboration has increased in recent years as DDoS attacks have become more frequent and complex worldwide. The legal actions against Butler include multiple charges related to the development and operation of the botnet. U.S. authorities have emphasized that such activities not only violate the law but can also cause significant harm to businesses and individuals.

Investigators estimate that DDoS attacks have led to billions in losses in recent years. Butler's arrest could have far-reaching consequences for the DDoS-for-hire scene. Experts warn that the shutdown of a large botnet like Kimwolf may prompt other operators to alter or intensify their activities. U.S. authorities have announced their commitment to continue addressing such threats and holding those responsible accountable. The cybersecurity community is closely monitoring developments surrounding Kimwolf and similar botnets.

Butler's arrest could serve as a signal to other operators that law enforcement is determined to combat cybercrime. U.S. authorities have previously stated that they possess the resources and technology to tackle such threats. Investigations into Butler and the Kimwolf botnet are ongoing. U.S. authorities have indicated that they will release further information as new insights emerge. The arrest may also lead to additional arrests related to DDoS attacks as investigators attempt to unravel the entire structure behind the botnet.

U.S. authorities have emphasized in their statement that combating cybercrime is a high priority. Butler's arrest exemplifies ongoing efforts to enhance internet security and hold perpetrators accountable. According to the DoJ, DDoS attacks are one of the most common forms of cyberattacks affecting businesses and organizations worldwide. Investigations and legal actions against Butler are expected to continue in the coming months.

U.S. authorities have announced that they will take all necessary measures to hold those responsible for DDoS attacks accountable. The exact number of affected customers and the financial impact of the Kimwolf botnet are currently unclear. Jacob Butler's arrest took place on May 23, 2026, and U.S. authorities have already begun preparations for prosecution.