Canadian Man Arrested for Operating KimWolf DDoS Botnet Hacking 2 Million Devices

Cybersecuritynews •Guru Baran • May 22, 2026

Canadian and U.S. authorities have arrested and charged a 23‑year‑old Ottawa resident for allegedly operating “KimWolf,” a massive Internet‑of‑Things (IoT) DDoS‑for‑hire botnet that weaponized more than a million connected devices worldwide, including systems in Alaska and on the U.S. Department of Defense Information Network (DoDIN). According to an unsealed criminal complaint in the District of […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Jacob Butler Arrested for Operating KimWolf DDoS Botnet Jacob Butler, a 23-year-old from Ottawa, Canada, was arrested for operating the KimWolf DDoS botnet, which infected over 2 million devices worldwide. The botnet utilized a DDoS-for-hire model, launching more than 25,000 attacks that caused financial losses exceeding $1 million for some victims. U.S. authorities unsealed a criminal complaint charging Butler with aiding and abetting computer intrusion, carrying a potential 10-year prison sentence. The KimWolf botnet targeted IoT devices, including digital cameras and Android TV boxes, leveraging vulnerabilities in residential proxy networks. The arrest followed a coordinated international law enforcement operation that seized infrastructure supporting multiple botnets. Butler's extradition to the U.S. is pending as he faces charges in both Canada and the United States. 17 sources 68

Extracted Entities

Canadian Man Arrested for Operating KimWolf DDoS Botnet Hacking 2 Million Devices

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Malware (1)