5 articles
The FBI seized hundreds of domains tied to NetNut after Google and security researchers linked the residential proxy network to Popa, a 2-million-device botnet of smart TVs and streaming boxes.
Operation Endgame's June 2026 action against SocGholish shows why fake browser updates, compromised WordPress sites, and criminal loader infrastructure still matter to defenders.
Europol does not usually kick down the door. It makes cybercrime investigations cross-border, evidence-rich, and harder for offenders to escape.
Dutch investigators seized more than 800 servers in a sanctions case tied to Stark Industries. The lesson for defenders is simple: attacker infrastructure is a business ecosystem.
Europol's OTF GRIMM has made 280 arrests in one year targeting criminal networks that outsource violence like a SaaS product. The model mirrors ransomware-as-a-service — and it's recruiting teenagers through Discord and encrypted apps.