The journalist who dismantled botnets and took down cybercrime empires

Technology · Published 20 October 2026 · Updated 25 October 2026 Swipe more like this →

In short: One reporter's investigation into a California hosting firm caused an immediate, global drop in spam volume. By exposing the infrastructure of organized cybercrime, Brian Krebs transformed from a newsroom copy aide into a primary target of the very criminals he tracks, facing DDoS attacks and swatting in the process.

Brian Krebs began his career in the circulation department of The Washington Post, eventually becoming a staff writer for Newsbytes.com and later Washingtonpost.com. His pivot to cybersecurity was sparked by a personal incident in 2001, when a computer worm locked him out of his own machine. This experience led him to launch the 'Security Fix' blog in 2005, which eventually evolved into his independent platform, KrebsOnSecurity.com, in 2009.

Krebs is noted for his ability to produce tangible results through investigative reporting. In 2008, his work led to the disconnection of the hosting provider McColo, which housed control networks for many of the world's largest botnets. This action caused an immediate drop in global junk email, estimated between 40 percent and 70 percent for several weeks or months. He also successfully campaigned to have the charter of EstDomains revoked by ICANN after uncovering illicit activities by its president.

His reporting has reached the highest levels of geopolitical and corporate significance. He was the first journalist to report on the Stuxnet malware in 2010 and broke the story of the 40 million credit cards stolen from Target in 2013. More recently, his work has exposed massive identity theft, including a 2026 report on a dark web service allegedly containing over 153 million American and Canadian driver’s license records. Despite his influence, his work often invites retaliation, including a massive DDoS attack in 2016 and ongoing legal challenges from the entities he investigates.

Krebs's impact is validated by numerous accolades, including the 2019 CISO MAG’s Cybersecurity Person of the Year and the 2017 ISSA's President's Award For Public Service. His work bridges the gap between technical security and public policy, focusing on the fallout of organized cybercrime groups that steal tens of millions of dollars from small and mid-sized businesses.

General information, not professional advice. Spotted an error? Flag the card or see corrections and complaints.

Intellect Plus is a visual educational discovery platform for exploring fascinating facts and ideas. Brain Food, Not Brain Rot. What is Intellect Plus?

Related

• How a high schooler's tool became a cybersecurity giant
• In 1988, a student's experiment accidentally crippled the early Internet, changing cybersecurity forever.
• How a computer programmer transformed global whistleblowing through the creation of WikiLeaks
• How a Romanian cybersecurity firm became a global force in dismantling darknet markets
• How one man’s software sparked a federal investigation into the nature of code
• Navigating the complex landscape of modern cybersecurity careers
• Why your company's biggest security flaw might be a lack of honesty
• When hardware manufacturers suggest you simply replace your entire router
• Can biological defense mechanisms protect our digital infrastructure from cyber threats?
• The technical architecture of history's first major darknet marketplace
• The hidden data lurking within your cropped smartphone photos
• Can we truly define the boundaries of cybersecurity?

More in Cybersecurity · More in Technology · Latest · A–Z · All topics