The U.S. Department of Justice (DoJ) recently confirmed the arrest of Jacob Butler, a 23-year-old from Ottawa, Canada, for his alleged role in operating the Kimwolf distributed denial-of-service (DDoS) botnet. This botnet is considered a variant of AISURU and has been involved in a range of cybercriminal activities.
Details of the Botnet Operations
According to the DoJ, the Kimwolf botnet primarily targeted devices that were typically protected by firewalls, such as digital photo frames and web cameras. These devices were compromised and used to execute DDoS attacks against various targets, including computers and servers globally, some of which were part of the Department of Defense Information Network (DoDIN).
Charges and Evidence
Butler faces charges related to the development and operation of the Kimwolf botnet, specifically one count of aiding and abetting computer intrusion. Evidence linking him to the botnet includes IP addresses, online account details, and messages from a Discord account associated with the botnet. His involvement was first reported by security journalist Brian Krebs earlier this year, where Butler claimed that he had not used his online persona since 2021 and suggested that someone else was impersonating him.
Impact and Law Enforcement Actions
The Kimwolf botnet is estimated to have issued over 25,000 attack commands and has been linked to some of the largest DDoS attacks recorded, with traffic peaking at 31.4 Terabits per second (Tbps). In a coordinated effort, U.S. authorities, along with Canadian and German law enforcement, disrupted the command-and-control infrastructure associated with Kimwolf and other botnets in a recent operation.
Future Implications
In addition to Butler’s arrest, law enforcement has unsealed seizure warrants aimed at dismantling 45 DDoS-for-hire platforms, some of which are believed to have collaborated with Kimwolf. If convicted, Butler could face up to 10 years in prison, underscoring the serious legal repercussions associated with cybercrime.
This article was produced by NeonPulse.today using human and AI-assisted editorial processes, based on publicly available information. Content may be edited for clarity and style.








