Cybercrime Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man. Eduard Kovacs1 day ago
Cybercrime Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims. Eduard KovacsOctober 1, 2026
Cybercrime AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets. Eduard KovacsSeptember 23, 2026
Cybercrime NightmareStresser DDoS Service Disrupted in International Operation Active since at least 2022, NightmareStresser was one of the longest-running DDoS-for-hire services in the world. Ionut ArghireSeptember 18, 2026
Cybercrime Microsoft and Allies Smash Shared Infrastructure of Amadey and StealC Malware Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies. Eduard KovacsJune 24, 2026
Malware & Threats 15,000 WordPress Websites Cleaned Up in SocGholish Botnet Takedown Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame. Ionut ArghireJune 19, 2026
Government FBI Seizes 13 Websites That Officials Say Were Used by China to Target and Recruit US Workers The 13 websites purported to be affiliated with consulting companies that advertised job openings for current and former holders of security clearances Associated PressJune 11, 2026
Cybercrime Over 1.4 Million Accounts Disrupted in Cybercrime Crackdown Law enforcement and tech companies disrupted infrastructure linked to scammers operating across Southeast Asia. Ionut ArghireJune 4, 2026
Cybercrime ‘First VPN’ Cybercrime Service Disrupted, Administrator Arrested The FBI says First VPN has been used by dozens of ransomware groups for network reconnaissance and intrusions. Eduard KovacsMay 22, 2026
Malware & Threats Microsoft Disrupts Malware-Signing Service Run by ‘Fox Tempest’ Fox Tempest provides a service that cybercriminals use to distribute ransomware and other malware disguised as legitimate software. Eduard KovacsMay 19, 2026
Cybercrime Resurrected ‘Crimenetwork’ Marketplace Taken Down, Administrator Arrested The second iteration of the German-speaking online crime marketplace had over 22,000 users and more than 100 sellers. Ionut ArghireMay 11, 2026
Cybercrime 53 DDoS Domains Taken Down by Law Enforcement Authorities in 21 countries participated in a coordinated action against DDoS-for-hire services. Ionut ArghireApril 17, 2026
Malware & Threats US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking The APT28 threat group exploited vulnerable TP-Link and MikroTik routers to conduct adversary-in-the-middle (AitM) attacks. Eduard KovacsApril 8, 2026
Phishing Tycoon 2FA Fully Operational Despite Law Enforcement Takedown Attack volumes are back to pre-disruption levels, and the adversary tactics have remained unchanged. Ionut ArghireMarch 23, 2026
Government US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites The US has seized several domains used by Handala in cyber-enabled psychological operations. Eduard KovacsMarch 20, 2026
Cybercrime Authorities Disrupt SocksEscort Proxy Service Powered by AVrecon Botnet Law enforcement agencies in the US and Europe targeted the cybercrime service that has impacted 360,000 devices since 2020. Eduard KovacsMarch 13, 2026
Cybercrime LeakBase Cybercrime Forum Shut Down, Suspects Arrested The stolen credential marketplace had been active since 2021 and in late 2025 it counted 142,000 users. Eduard KovacsMarch 5, 2026
Cybercrime Tycoon 2FA Phishing Platform Dismantled in Global Takedown The phishing-as-a-service platform was used to send fraudulent emails to over 500,000 organizations every month. Eduard KovacsMarch 4, 2026
Cybercrime RedVDS Cybercrime Service Disrupted by Microsoft and Law Enforcement RedVDS enables threat actors to set up servers that can be used for phishing, BEC attacks, account takeover, and fraud. Eduard KovacsJanuary 14, 2026
Cybercrime $29 Million Worth of Bitcoin Seized in Cryptomixer Takedown Cryptomixer was targeted by law enforcement in Operation Olympia for facilitating cybercrime and money laundering. Eduard KovacsDecember 1, 2025