1. Home
  2. Newsroom

Team Cymru Newsroom

The Newsroom

The latest cyber security news from Team Cymru: company news, press releases, product and data updates, and threat takedown activity. One place, newest first.

Searches every press release, news story and takedown on this page.

Latest from Team Cymru

News and Press Releases

Disruption Operations

Threat Takedowns & Disruptions

Cybercrime operations Team Cymru supported with law enforcement and the global defender community, on the public record.

DOJ · EuropolMar 2026U.S. DOJ · Europol PowerOFF · 4 Nations

IoT DDoS Botnet Disruption

Aisuru, KimWolf, JackSkid, and Mossad, the largest IoT DDoS botnets on record, dismantled across the U.S., Canada, Germany, and the Netherlands. Attacks peaked near 30 terabits per second and targeted the U.S. Department of Defense network.Three million hijacked cameras, routers, and DVRs, rented out to attack anyone for a fee. The exchange helped map the infrastructure. The C2 went dark. The attacks stopped.Read the blog post3M+Devices Freed4Botnets Down30TBPS Peak Attack
INTERPOLOct 2025 – Feb 2026INTERPOL · 13 Countries

Operation Ramz

The first cyber operation of its scale coordinated by INTERPOL in the MENA region. Phishing-as-a-service platforms, malware infrastructure, and investment scams disrupted across 13 countries, with 3,867 victims identified.One raid uncovered 15 scam workers who turned out to be trafficking victims themselves, coerced into the scheme. Taking down this infrastructure freed people on both ends of it.Read the press release201Arrested53Servers Seized13Countries
INTERPOLDec 2025 – Jan 2026INTERPOL · 16 Nations

Operation Red Card 2.0

Investment scams, mobile money fraud, and fake loan apps dismantled across Africa. Network telemetry exposed infrastructure tied to over $45M in fraud losses.The people running these scams targeted families with empty bank accounts and worse promises. The exchange helped trace them. 651 arrests. The money came back.Press releaseOur role in Red Card 2.0651Arrested1,442IPs Down$4.3MRecovered
EuropolNov 2025Europol · Eurojust · 30+ Partners

Operation Endgame III

Rhadamanthys infostealer, VenomRAT, and Elysium botnet dismantled in coordinated action across 11 European locations. VenomRAT’s main operator arrested in Greece.Stealer malware quietly drains people. Bank logins. Crypto wallets. Personal data sold downstream. 1,025 servers offline means 1,025 fewer pipes for that to flow through.Read the blog post1,025Servers Down20Domains Seized11Locations
DOJ · FBIMay 2025U.S. DOJ · FBI · Europol

DanaBot Disruption

Exchange defenders mapped DanaBot’s multi-tier C2 architecture across 40+ countries. The botnet had been weaponized in DDoS attacks against Ukraine’s Ministry of Defence.A botnet weaponized against a nation at war is a botnet that endangers civilians. The exchange mapped it. Charges followed. The infrastructure came down.Inside DanaBot’s infrastructure16Charged150C2 Servers40+Countries
INTERPOLApr – Aug 2024INTERPOL · 95 Countries

Operation Synergia II

The largest coordinated takedown of cybercrime servers ever recorded. Phishing infrastructure, information stealers, and ransomware operations dismantled across nearly half the world’s nations.Every server taken down is a campaign that doesn’t reach an inbox. A ransomware operation that doesn’t hit a hospital. A phishing page that doesn’t take a paycheck.Read the blog post22K+Servers41Arrested95Nations

Consolidated Record

All Newsroom Updates

Get the Newsroom in your inbox

Dragon News Bytes delivers the security stories worth your attention. To reach the Team Cymru PR team directly, email pr@cymru.com.