Ottawa Man Charged in Botnet Attack Infecting Millions
Canadian and U.S. authorities arrested a 23-year-old for operating Kimwolf, a malware network that compromised military and civilian systems worldwide.
Jacob Butler, 23, of Ottawa has been arrested and charged in an international cybercrime operation that infected millions of devices worldwide, including systems tied to the U.S. Department of Defense.
Ontario Provincial Police cybercrime investigators arrested Butler on Wednesday following a March search of his home where officers seized electronic devices. He's accused of developing and operating Kimwolf, a botnet—a network of hacked internet-connected devices—that worked in tandem with another malware strain called Aisuru to compromise networks globally.
Botnets operate by remotely controlling compromised devices, typically targeting things like digital photo frames, web cameras, and routers. Once hacked, these devices become nodes in a criminal network that can be sold to other cybercriminals for various attacks or data theft operations.
Butler faces charges in Ontario under the Criminal Code for unauthorized computer use and cyber mischief. He's also been charged by the U.S. Department of Justice with aiding and abetting computer intrusion—a federal crime carrying up to 10 years in prison if convicted. The international operation involved coordinated action by U.S. and German authorities alongside Canadian police, signaling the cross-border nature of modern cybercrime and enforcement.
The case underscores how a single person operating from Ottawa can compromise critical infrastructure and military networks globally. Butler is scheduled to appear in Ontario Court of Justice on Tuesday.