Breadcrumb Trail Links
Jacob Butler, 23, who was arrested Wednesday by OPP, also facing aiding and abetting computer intrusion charge in Alaska
Published May 21, 2026 • Last updated 5 hours ago • 2 minute read
You can save this article by registering for free here. Or sign-in if you have an account.
A 23-year-old Ottawa man is facing extradition to the United States after being accused of involvement in a massive cyberattack that affected more than a million devices worldwide. Photo by Getty ImagesArticle content
A 23-year-old Ottawa man is facing extradition to the United States after being accused of involvement in massive cyberattacks that affected more than a million devices worldwide.
Advertisement 2
This advertisement has not loaded yet, but your article continues below.
THIS CONTENT IS RESERVED FOR SUBSCRIBERS ONLY
Subscribe now to read the latest news in your city and across Canada.
Unlimited online access to articles from across Canada with one account.Get exclusive access to the Toronto Sun ePaper, an electronic replica of the print edition that you can share, download and comment on.Enjoy insights and behind-the-scenes analysis from our award-winning journalists.Support local journalists and the next generation of journalists.Daily puzzles including the New York Times Crossword.
SUBSCRIBE TO UNLOCK MORE ARTICLES
Subscribe now to read the latest news in your city and across Canada.
Unlimited online access to articles from across Canada with one account.Get exclusive access to the Toronto Sun ePaper, an electronic replica of the print edition that you can share, download and comment on.Enjoy insights and behind-the-scenes analysis from our award-winning journalists.Support local journalists and the next generation of journalists.Daily puzzles including the New York Times Crossword.
REGISTER / SIGN IN TO UNLOCK MORE ARTICLES
Create an account or sign in to continue with your reading experience.
Access articles from across Canada with one account.Share your thoughts and join the conversation in the comments.Enjoy additional articles per month.Get email updates from your favourite authors.
THIS ARTICLE IS FREE TO READ REGISTER TO UNLOCK.
Create an account or sign in to continue with your reading experience.
Access articles from across Canada with one accountShare your thoughts and join the conversation in the commentsEnjoy additional articles per monthGet email updates from your favourite authors
Article content
Ontario Provincial Police said their cybercrime investigations team began probing two major botnet operations – KimWolf and Aisuru – in January that were believed to be responsible for some of the largest distributed denial of service (DDoS) attacks ever recorded.
Article content
Article content
Botnet operators sell access to “enslaved” household devices like digital picture frames or web cameras to cybercriminals, which are then commandeered to overwhelm websites, servers or networks with fake web traffic.
The OPP investigation, which received co-operation from law enforcement agencies elsewhere in Canada as well as the U.S. and Germany, led to a search warrant being executed on March 19 at a residence in Ottawa, where “multiple” electronic devices were seized.
Charges laid in both Canada, U.S.
Jacob Butler was arrested on Wednesday and charged with unauthorized use of a computer; possession of a device to obtain unauthorized use of a computer system or to commit mischief; and mischief in relation to computer data.
Your Midday Sun
Thanks for signing up!
Article content
Advertisement 3
This advertisement has not loaded yet, but your article continues below.
Article content
They said Butler remains in custody pending a court appearance Tuesday in Ottawa.
“DDoS attacks are borderless crimes,” Det.-Sgt. Matthew Ellwood said in an OPP news release. “The actions of cybercriminals can cause disruption here at home, even when the attack is launched from thousands of kilometres away.
“That’s why understanding DDoS attacks at a global level is essential to protecting the public and explaining the instability they cause.”
The announcement came on the same day the U.S. Attorney’s Office in Alaska said they were seeking Butler’s extradition after he was charged there with aiding and abetting computer intrusion.
Someone convicted of that charge could face up to 10 years in prison, the U.S. Attorney’s Office said.
RECOMMENDED VIDEO
We apologize, but this video has failed to load.
Play VideoSuspect accused of operating KimWolf botnet
An OPP spokesperson confirmed that Butler is the same person charged in both cases, but referred any further comments to the U.S. Department of Justice.
Advertisement 4
This advertisement has not loaded yet, but your article continues below.
Article content
An email seeking information from the U.S. Department of Justice on the extradition process was not immediately returned.
In a criminal complaint unsealed in the District of Alaska, the U.S. Attorney’s Office accused Butler of operating the KimWolf botnet that allegedly helped infect more than a million devices worldwide, including ones in that state.
The complaint alleges that KimWolf was tied to massive DDoS attacks that resulted in financial losses that exceeded more than $1 million for some victims. The KimWolf botnet alone allegedly issued more than 25,000 attack commands, the U.S Attorney’s Office said.
“Law enforcement allegedly connected Butler to the administration of the KimWolf botnet through IP address, online account information, transaction records and online messaging application records obtained through the issuance of legal process,” the U.S. Attorney’s Office said in a news release.
Anyone with information that could assist the investigation is asked to call the OPP at 1-888-310-1122 or Crime Stoppers anonymously at 1-800-222-8477 or ontariocrimestoppers.ca.
Read More
Feds to pay $8.7M to settle Canada Revenue Agency data breaches lawsuit
University of Toronto among universities affected by worldwide cyberattack on Canvas system
Article content
Share this article in your social network