CYBERSECURITYTRACKER
TRACKING9,129 stories in this site build2,164 vulnerability news stories in this site build
Incidents

Takedowns

Track official cybercrime disruptions, seizures, arrests, charges, and sanctions alongside clearly labelled reporting.

Cybercrime operations disrupted, infrastructure seized, suspects arrested or charged, and sanctions imposed. Official actions lead this record, supplemented by clearly labelled reporting.

We track 9 official sources: the United States Department of Justice (US DOJ), the United Kingdom National Crime Agency (UK NCA), the United States Office of Foreign Assets Control (US OFAC), the Cybersecurity and Infrastructure Security Agency (CISA), Royal Canadian Mounted Police, Europol, Eurojust, National Bureau of Investigation of Finland, and Netherlands Police. Actions announced elsewhere are not here unless a tracked news feed reported them. A missing publication date is labelled with the date first seen; it is never presented as the event date. Latest official item per source: U.S. Department of Justice: 2026-10-15; UK National Crime Agency: 2026-06-22; U.S. Treasury Office of Foreign Assets Control: no official records; Cybersecurity and Infrastructure Security Agency news: no official records; Royal Canadian Mounted Police: 2026-08-04; Europol: 2026-10-01; Eurojust: 2026-10-01; National Bureau of Investigation of Finland: 2023-02-03; Netherlands Police: 2026-10-08.

Office of Foreign Assets Control (OFAC) CYBER program baseline (not a dated action): OFAC added 5 CYBER4 cyber sanctions entries: OFAC's weekly SDN snapshot added 5 entries under CYBER4. Identity and personal fields are not republished.

820 official actions (2009-05-05 to 2026-10-15) and 144 news reports; official actions first, newest first within each section.

Showing 50 of 964 actions.

Official action

Direct releases and published records from the tracked government sources.

Official action
IndictmentExtradition

Middle District of Florida Joins DOJ Fraud Division, IRS, IRS-CI, and the FBI in National Tax Enforcement Surge Exposing More than $490M in Tax Fraud

Tampa, FL – The United States Attorney’s Office for the Middle District of Florida (MDFL) announced today the extradition of Adedotun Abraham Adeyemo (47, of Pretoria, South Africa) and the unsealing of a superseding indictment charging him with two counts of wire fraud and two related counts of aggravated identity theft. Each wire fraud count carries a maximum penalty of 20 years in prison, and each aggravated identity theft count carries a mandatory two-year prison term, consecutive to any sentence for the underlying felony. This case is part of nationwide enforcement actions led by the Just

Official action
Disruption

Department of Justice Announces Results of Law Enforcement and Private Industry Joint Disruption Week Targeting Online Scam Accounts and Transnational Criminal Networks Operating in West Africa

“Transnational fraud demands a transnational response,” said U.S. Attorney Jeanine Ferris Pirro for the District of Columbia, founder of the Scam Center Strike Force. “I have partnered with the NCA and the Crown Prosecutor for England and Wales to push forward cases on both sides of the Atlantic; criminals are not hindered by borders and neither are we. We will deploy our team wherever in the world transnational criminals target innocent victims.”

Official action
Disruption

Operation Lonestar Roundup dismantles North Korean IT worker network used to penetrate U.S. companies in Texas

United States Attorney for the Northern District of Texas Ryan Raybould and FBI Dallas Special Agent in Charge R. Joseph Rothrock today announced today that federal agents have disrupted a major illicit laptop‑hosting network that enabled Democratic People's Republic of Korea IT workers to unlawfully access U.S. corporate systems using stolen or falsified American identities.

Official action
Guilty plea

Ukrainian-Russian Dual Citizen Pleads Guilty to Running International Money Laundering Organization for Cybercriminals

CHARLOTTE, N.C. – Oleg Korniev, 42, a dual citizen of Ukraine and Russia, pleaded guilty today to running a sophisticated international money laundering organization that laundered millions of dollars stolen from United States victims by cybercriminals around the world. In total, this international criminal organization recruited over 15,000 U.S.-based money mules to launder at least $10 million stolen by hackers from over 750 U.S. bank accounts. “Money mules play crucial roles in cybercrime, so the Justice Department pursues mules and their recruiters wherever they operate and however long it

Official action
SentencingGuilty plea

Brookfield Man Sentenced to 84 Months for Money Laundering Conspiracy

Brad D. Schimel, First Assistant United States Attorney for the Eastern District of Wisconsin, announced that on October 6, 2026, United States District Judge Brett H. Ludwig sentenced Ankurkumar Patel (age 44) of Brookfield, Wisconsin, to 84 months imprisonment. On June 15, 2026, Patel pled guilty to one count of money laundering conspiracy for laundering over $1 million stolen from elderly victims in multiple states who fell prey to a “Phantom Hacker Scam.” Phantom Hacker Scams are a type of fraud that primarily targets elderly victims. A participant in the scheme, who is often located overs

Official action
IndictmentConviction

Jonathan Spalletta Convicted For Defrauding Crypto Exchange Of Over $50 Million In Hacks

United States Attorney for the Southern District of New York, Jamie McDonald, announced the conviction by jury of JONATHAN SPALLETTA, a/k/a “Cthulhon,” a/k/a “Jspalletta,” for computer fraud and money laundering in connection with his hacks of the decentralized cryptocurrency exchange Uranium Finance (“Uranium”). SPALLETTA was convicted on all counts of the Indictment following a six day jury trial before U.S. District Judge Jed S. Rakoff.

Official action
Indictment

Owner of Florida Ransomware Remediation Company Charged with Defrauding Clients

BROOKLYN, NY — Earlier today, Zohar Pinhasi, also known as “Zack Silver” and “Zack Green,” was arraigned on wire fraud charges for allegedly defrauding clients of his ransomware remediation company, MonsterCloud LLC (MonsterCloud). Pinhasi, a national of the United States and Israel, was indicted by a grand jury in the Eastern District of New York on September 23, 2026. The proceeding was held in federal court in Brooklyn before United States Magistrate Judge Peggy Cross‑Goldenberg.

Official action
SentencingGuilty plea

Pair Sentenced for Roles in Business Email Fraud Scheme

ABINGDON, Va. – Two individuals who conspired with others to execute a business email compromise scheme that stole more than $1.5 million from victims throughout the United States were recently sentenced in U.S. District Court in Abingdon. Shelton, 57, of Wytheville, Virginia, and Olivia Oxley, 36, of Brooklyn, New York, both pleaded guilty in July last year to conspiracy to commit bank and wire fraud. For her role in the conspiracy, Oxley was sentenced to one year and one day of imprisonment followed by three years of supervised release. Shelton was sentenced to 300 hours of community service

Official action
ArrestIndictment

Dutch National Indicted and Arrested for Unauthorized Computer Access Conspiracy

SAN JUAN, Puerto Rico – On September 16, 2026, a federal grand jury in the District of Puerto Rico returned an indictment charging a Dutch national who resides in the United Kingdom with conspiracy to intentionally access a computer without authorization for financial gain, intentionally causing damage without authorization to a protected computer, and intentionally transmitting a threat to obtain information from a protected computer without authorization with the intent to extort. The Dutch national named in the indictment, Fouad Eltibrizi (a/k/a Archduke), was arrested on September 30, 2026

Official action
Seizure

United States Attorney's Office Files Civil Forfeiture Action to Recover Cryptocurrency Involved in an Account Takeover Fraud Scheme

BOSTON – The United States Attorney’s Office filed a civil forfeiture action to recover 110,270 USDT (Tether), alleged to be proceeds of a fraud scheme in which a Massachusetts victim was deceived into providing account login information to scammers, who then removed funds from the victim’s account. The cryptocurrency currently has an estimated value of approximately $47,000.

Official action
SeizureDisruption

FBI Seizes DDoS-for-Hire Domains as Part of Continuing District of Alaska Crackdown on ‘Booter’ and ‘Stresser’ DDoS Services

ANCHORAGE, Alaska – The Justice Department today announced the court-authorized seizure of internet domains associated with one of the world’s longest running Distributed Denial of Service (DDoS) for-hire services known as “NightmareStresser.” Federal law enforcement has seized websites maintained by criminal service providers that allow paying customers to launch powerful DDoS attacks targeting victims in the District of Alaska and worldwide as part of coordinated actions to disrupt so called “Booter” or “Stresser” operators. Booter services such as those named in this action allegedly facili

Official action
TakedownDisruption

Sality Malware Disrupted in International Cyber Takedown

The Department of Justice today announced a multinational operation involving actions in the United States, Bulgaria, Hungary, and Romania, in collaboration with private industry partners CrowdStrike and the Shadowserver Foundation, to disrupt the botnet and malware known as Sality and take down its infrastructure.

Official action
Indictment

17 Iranians Charged with Conducting Massive Cyber Theft Campaign on Behalf of the Islamic Revolutionary Guard Corps and Other Iranian Entities

A 14-count superseding (S2) indictment was unsealed today charging 17 members of the Mabna Institute, an Iran-based company that, since at least 2013, has conducted a coordinated campaign of cyber intrusions into computer systems for 144 U.S.-based universities, 178 foreign universities, at least 42 U.S.-based private sector companies, at least 11 foreign private sector companies, at least five U.S. federal and state government agencies, and at least two non-governmental organizations (NGOs). The Mabna Institute stole more than 31 terabytes of academic data and intellectual property from these

Official action
Indictment

Three Russian Nationals Indicted for International Cybercrimes Resulting in More Than $62M in Losses to Victims

The U.S. Attorney’s Office for the Northern District of Ohio has announced the unsealing of an indictment charging three Russian nationals for their roles in malicious cyber activities against U.S. critical infrastructure affecting victims in 21 states and in several countries, with losses amounting to tens of millions of dollars. These charges are the result of a seven-year-long investigation.

Official action
IndictmentSeizureConviction

Man Serving Federal Prison Sentence Charged with Theft of Forfeited Cryptocurrency

LEXINGTON, Ky. — Rossen G. Iossifov, 53, a former Bulgarian national, made an initial appearance in federal court in the Eastern District of Kentucky yesterday on charges of the destruction or removal of property to prevent seizure, aiding and abetting, and conspiracy to commit money laundering. The charges stem from Iossifov’s alleged role in the unauthorized withdrawal and transfer of approximately $290,000 in cryptocurrency that had been seized and forfeited by the United States. “Having been convicted of a widespread online auction fraud scheme targeting U.S. victims, Iossifov is now charg

Official action
Seizure

Over $2 Million in Stolen Funds Recovered by U.S. Attorney’s Office and FBI

BURLINGTON – The Office of the United States Attorney for the District of Vermont announced today that it had successfully obtained a judgment in forfeiture for $2,270,202.39 in funds stolen from the Chittenden Solid Waste District (CSWD) in a cyber-enabled fraud scheme. United States District Judge William K. Sessions III signed the order of forfeiture and judgment on July 2, 2026, releasing the funds to the government. According to the settlement agreement in the case, the funds will now be returned to CSWD by the United States Marshals Service. As explained in documents from the case, in la

Official action
Seizure

Justice Department Seizes Backend Infrastructure Used by the Huione Group for Money Laundering Services

Today, the Justice Department announced the seizure of a cloud computing account used by subsidiaries of the Huione Group, a Cambodia-based corporate conglomerate. These subsidiaries are alleged to have assisted individuals and organizations in transferring proceeds of cryptocurrency investment frauds, cyber scams, and other criminal activities on cryptocurrency blockchains and allowing for the conversion of the proceeds of these schemes to the legitimate banking sector undetected.

Official action
ArrestIndictmentTakedown

Two Charged in Connection With Cryptocurrency Money Laundering Service That Allegedly Laundered Over $389 Million in Unlawful Transactions

PHILADELPHIA – United States Attorney David Metcalf announced that Ruslan Igorevich Tkachuk, 37, and Alexander Vladimirovich Ledenev, 25, both residing in Batumi, Republic of Georgia, were arrested on Wednesday and charged by criminal complaint with one count of conspiracy to launder monetary instruments and one count of sting money laundering, arising from their alleged operation of “AudiA6,” a cryptocurrency money laundering service believed responsible for laundering more than $389 million in cryptocurrency. A coordinated international takedown of AudiA6 and its infrastructure was conducted

Official action
Disruption

Scam Center Strike Force Announces Results of U.S. & Private Industry “Disruption Week”

The Department of Justice, through U.S. Attorney Jeanine Ferris Pirro for the District of Columbia and Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division, today announced the results of a first-of-its-kind event combining the focus of government entities and private industries to tackle cyber-enabled and cryptocurrency fraud targeting Americans.

Official action
ArrestIndictment

German citizen charged with laundering funds linked to prominent darknet marketplace “Dream Market”

Owe Martin Andresen, the suspected main administrator of Dream Market, one of the largest illicit darknet marketplaces before its 2019 shutdown, has been indicted for an alleged scheme to launder funds from Dream Market’s administrator accounts. Andresen was arrested last week in Germany on parallel charges brought by the German government.

Official action
ArrestIndictmentExtradition

Romanian National Appears in Federal Court Following Extradition from Romania on Bank Fraud Charges Stemming From “Vishing” Scheme

CHARLOTTE, N.C. – A Romanian national appeared in court today to face bank fraud charges for his role in a “vishing” scheme, following his extradition from Romania, announced Russ Ferguson, U.S. Attorney for the Western District of North Carolina. On November 14, 2017, a federal grand jury in Charlotte returned a criminal indictment charging Gavril Sandu, 53, with one count of conspiracy to commit bank fraud and one count of bank fraud. Sandu was arrested in Romania on January 9, 2026. He was extradited to the United States on April 30, 2026. “Greed crosses borders, but so does our relentless

News report

News stories selected from the headline and the opening sentence only, so that a story mentioning an older case further down is not listed here. An ordinary action word must appear in the same sentence as a law-enforcement agency, or directly after a government named as the headline's subject, and an agency named in the opening sentence also counts for an action word in the headline. An arrest, an indictment, or a completed court outcome, meaning a sentencing, a guilty plea, or an extradition, counts on its own because only police, a grand jury, or a court do those; an arrest warrant with no other action word shows a Warrant chip instead, since no custody has been claimed, and a story whose headline is a reward offer shows a Reward offered chip instead of the arrest or indictment it recaps. A conviction is never listed from news, because news stories mostly use "convicted" to describe someone's past. Cyberstalking, sextortion, online threats, and swatting stay off this page as a subject, and cyber-enabled fraud is listed only when it names business email compromise, a crypto-laundering service, or a North Korean information-technology-worker scheme; ordinary romance, investment, and tech-support scams stay off. Not an official record, and possibly the same operation as a card above.

Glossary