Cybercrime

Over 1.4 Million Accounts Disrupted in Cybercrime Crackdown

Law enforcement and tech companies disrupted infrastructure linked to scammers operating across Southeast Asia.

Cybercrime takedown

Law enforcement agencies and tech companies disrupted over 1.4 million accounts and underlying infrastructure used by scam networks across Southeast Asia.

The joint effort, named Disruption Week, involved the US Department of Justice’s Scam Center Strike Force, the Royal Thai Police, global law enforcement, and companies such as Apple, Coinbase, Google, Meta, Microsoft, Silent Push, SpaceX, TRM Labs, and Zenlayer.

As part of the operation, more than 1.4 million social media accounts, pages, and groups on Facebook and Instagram, as well as Microsoft accounts and Starlink kits, were disrupted, and 63 individuals involved in scam activities were arrested.

The effort also resulted in the disruption of malicious IP address traffic and network connections used by the scammers, and in the decommissioning of associated servers and hosting infrastructure.

Disruption Week targeted numerous fraud schemes operated out of industrial-scale compounds in Cambodia, Laos, and Burma.

The scammers lured workers to Thailand under the promise of high-paying technical jobs, then seized their IDs and trafficked them to the compounds, forcing them to engage in fraud operations against entities in the US and abroad.

Advertisement. Scroll to continue reading.

The takedown operation also resulted in criminal complaints being filed against individuals involved in cryptocurrency investment fraud in Burma, and in over $3.8 million in cryptocurrency assets linked to the criminal networks being frozen.

“Disruption Week shows what is possible when governments and private industry focus their efforts in tandem: millions of scam accounts interrupted, and criminal networks pushed of the US internet platforms on which they rely. This week’s results show our commitment to disrupting these schemes and protecting the American public,” US Attorney Jeanine Ferris Pirro said.

Related: Dutch Police Dismantle Massive 17-Million-Device Botnet

Related: GlassWorm Botnet Disrupted

Related: Resurrected ‘Crimenetwork’ Marketplace Taken Down, Administrator Arrested

Related: Canadian Man Arrested for Operating Kimwolf Botnet

Related Content

Cybercrime

Relying on social engineering, the hacking group engages in credential phishing, malware distribution, and fraud activities.

Cybercrime

The two own Dutch companies that allegedly provided bulletproof hosting services to Russia-aligned threat actors.

Cybercrime

The FBI says First VPN has been used by dozens of ransomware groups for network reconnaissance and intrusions.

Malware & Threats

 Fox Tempest provides a service that cybercriminals use to distribute ransomware and other malware disguised as legitimate software.

Cybercrime

The stolen credit card data was released as a free download, allegedly in response to seller misconduct.

Cybercrime

The 13-country effort, named Operation Ramz, targeted cyber threats in the Middle East and North Africa region.

Cybercrime

Grafana appears to have been targeted by Coinbase Cartel, a cybercrime group linked to ShinyHunters, Scattered Spider, and Lapsus$.

Cybercrime

The second iteration of the German-speaking online crime marketplace had over 22,000 users and more than 100 sellers.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version