cyber.hendryadrian.com
Security News · securityweek.com

Canadian Man Arrested on U.S. Charge Tied to Kimwolf Botnet

· Original article ↗

Summary

Canadian Jacob Butler, known as “Dort,” was arrested and charged in the U.S. with aiding and abetting computer intrusion over his alleged administration of the Kimwolf DDoS botnet. The U.S. is seeking his extradition.

Key points

  • The U.S. Justice Department says 23-year-old Ottawa resident Jacob Butler, known online as “Dort,” was arrested in Canada and charged with aiding and abetting computer intrusion.
  • The U.S. is seeking Butler’s extradition; if convicted, he faces up to 10 years in prison.
  • The Justice Department says law enforcement allegedly linked Butler to Kimwolf administration using IP address, account, transaction, and messaging records obtained through legal process.
  • Kimwolf was described as an Android-focused successor to Aisuru and reportedly ensnared approximately 2 million devices while abusing residential proxy networks to expand.
  • Aisuru and Kimwolf were linked to a DDoS attack that peaked at 31.4 Tbps.
  • The Justice Department also announced seizure warrants targeting online services supporting 45 DDoS-for-hire platforms, including at least one that collaborated with Kimwolf.

Article Details

Event Type
Arrest and criminal charge of a suspect accused of administering the Kimwolf DDoS botnet
Impact
Jacob Butler was arrested in Canada and charged in the United States with aiding and abetting computer intrusion; the United States is seeking his extradition. The DoJ alleges that law enforcement linked him to Kimwolf’s administration using IP address, account, transaction, and messaging records. Kimwolf was described as ensnaring approximately 2 million devices and was linked, along with Aisuru, to a DDoS attack that peaked at 31.4 Tbps. Authorities also seized services supporting 45 DDoS-for-hire platforms, including at least one that the DoJ said collaborated with Kimwolf.

MITRE ATT&CK

T1498 · Network Denial of ServiceKimwolf and Aisuru were used to carry out distributed denial-of-service attacks.

Threat Actors

DortOnline name of Jacob Butler, whom the DoJ accuses of administering the Kimwolf botnet. The alleged activity is not established as proven in the article.Jacob ButlerThe DoJ accuses Butler of administering the Kimwolf botnet. He was arrested and charged with aiding and abetting computer intrusion; the allegations are not established as proven in the article.

Malware

AisuruOne of them was Kimwolf, described as the Android-focused successor of a botnet named Aisuru, which was also targeted by authorities.KimwolfThe US Justice Department announced on Thursday that a Canadian man has been arrested for operating the recently disrupted Kimwolf DDoS botnet.

Products

AndroidOne of them was Kimwolf, described as the Android-focused successor of a botnet named Aisuru, which was also targeted by authorities.

Countries

CanadaButler has been arrested in Canada and the US is seeking his extradition.Germanyit announced the disruption of the botnets in March, the DoJ said law enforcement agencies in Canada and Germany also targeted botnet administrators and infrastructure, but did not say whether anyone had been arrested.United StatesThe suspect, 23-year-old Jacob Butler of Ottawa, known online as ‘Dort’, is accused of administering the botnet and has been charged in the US on one count of aiding and abetting computer intrusion.

Related Articles