krebsonsecurity.com 2/28/2026, 12:23:30 PM · via preferred

Kimwolf botnet operator DortDev fuels DDoS and doxxing surge

CyberSIXT Evidence Panel
Threat Actor
Dort

IN a February 2026 post, KrebsOnSecurity examines what is knowable about Dort, the person behind Kimwolf, described as the world’s largest and most disruptive botnet, and notes that Dort has coordinated DDoS, doxing and email flooding attacks against the author since early January 2026.

A public dox from 2020 claimed Dort was a Canadian teenager born in August 2003 and linked the aliases CPacket and M1ce to Dort, with a GitHub account created in 2017 under the names Dort and CPacket using the email jay.miner232@gmail[.]com. Intel 471 says that email was used to register accounts on cybercrime forums, including Nulled and Cracked, with activity traced to the same Rogers Canada address.

Dort, also known as DortDev, was active in March 2022 with the LAPSUS$ group and marketed services such as temporary email addresses and Dortsolver, a CAPTCHA bypass tool, advertised on SIM Land, a Telegram channel for SIM-swapping. The piece notes that Dort and a business partner allegedly stole over $250,000 worth of Microsoft Xbox Game Pass accounts, and that recent actions have included a swatting threat against researcher Benjamin Brundage.

The post, published on 28 February 2026, portrays Dort as having evolved from gaming cheats into more serious crimes and highlights the ongoing public threats and information disclosures surrounding the case.

View full article

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline