Do Son Europol and CrowdStrike disrupted the Sality botnet, a 20-year P2P network, using a peer-to-peer sinkhole to cut its operator off from infected machines.
Europol
Operation Endgame disrupts the SocGholish malware network, seizing EUR 41M in crypto and 326 servers. WordPress site owners must act now.
Authorities dismantled a major crypto laundering service used by ransomware gangs to wash millions. Read about the global AudiA6 dark web takedown.
Europol dismantled a counterfeit document production facility in Spain distributing fraudulent identity documents across Europe through an online marketplace.
Europol targets illegal streaming networks run by complex criminal enterprises. The joint action dismantled nine crime groups and removed 27,000 URLs.
Europol completely dismantles 'First VPN,' seizing 33 servers and uncovering an underground database used by thousands of global ransomware operators.
Law enforcement from 14 countries just seized LeakBase.ws. With 142k accounts and 215k messages exposed, the DOJ sends a clear message: No hacker is anonymous.
Microsoft and Europol lead a global coalition to dismantle Tycoon 2FA, a massive AiTM phishing platform that bypassed MFA for over 500,000 organizations.
Microsoft & police seize RedVDS, a service providing disposable VMs for crime. The takedown stops a network responsible for over $40M in fraud losses.
Europol dismantled the centralized mixer CryptoMixer, which laundered over €1.3B in Bitcoin since 2016. Authorities seized three servers and confiscated more than €25M in digital assets.
Dutch police seized 250 servers from a bulletproof hosting provider (CrazyRDP) used by cybercriminals since 2022, facilitating over 80 cybercrime investigations.
CISA/Europol updated their advisory on Akira Ransomware, confirming $244M in profits. The group now encrypts Nutanix AHV VMs and performs data exfiltration in just two hours via VPN flaws.
A coordinated international operation led by Europol has dismantled a criminal network responsible for a string of explosive ATM attacks in Austria, Germany, and the Netherlands.
A highly organized Romanian criminal group, notorious for ATM "Transaction Reversal Fraud" and openly taunting police, has been dismantled by UK and Romanian authorities in a Europol-backed operation.
The suspected administrator of xss.is, a notorious Russian-speaking cybercrime forum, has been arrested in Ukraine after a joint operation by French police and Europol.
Operation Eastwood, a massive international effort led by Europol, has significantly disrupted the pro-Russian cybercrime group NoName057(16), known for DDoS attacks.
Europol and allies arrested 5, dismantling a global crypto investment fraud ring that laundered €460M from 5,000+ victims, exploiting Hong Kong banking networks.
Europol and Microsoft led Operation Endgame, a global takedown disrupting 300+ servers and 650 malicious domains linked to major ransomware malware strains.
Global operation neutralizes Lumma Stealer, infecting hundreds of thousands of PCs. Europol & Microsoft seized over 1,300 malicious domains.
Europol-backed operation busts €3M investment fraud network deceiving 100+ victims via fake trading platform. Arrests made in Cyprus, Israel, Albania.
Polish authorities arrested four individuals running a global DDoS-for-hire network, disrupting thousands of cyberattacks. Part of Europol's Operation PowerOFF.
A Europol-supported operation dismantled a major criminal group producing counterfeit euro banknotes. The investigation spanned multiple countries and resulted in arrests and the seizure of fake currency and production facilities.