DOJ and Europol takedown of SocksEscort proxy network
Law Enforcement
Summary
Hide ▲
Show ▼
U.S. and European law enforcement took down SocksEscort, a long-running cybercrime proxy network that routed traffic through compromised edge devices. The action seized 34 domains and 23 servers across seven countries and froze $3.5 million in cryptocurrency. It cut off infected devices from the service and disrupted a platform used to help criminals evade blocklists and route malicious traffic.
Related Happenings
1VPNS takedown in Operation Saffron
Law Enforcement
H score26
First: 14.07.2026 12:40
Last: 14.07.2026 12:40
Sources 1
About this happening:
French and Dutch authorities took down 1VPNS, seized 33 servers, and arrested its administrator in Operation Saffron, disrupting a VPN service used by ransomware...
1VPNS takedown in Operation Saffron
Law EnforcementAbout this happening: French and Dutch authorities took down 1VPNS, seized 33 servers, and arrested its administrator in Operation Saffron, disrupting a VPN service used by ransomware...
Joint operation dismantles First VPN Service (1VPNS)
Law Enforcement
H score33
First: 14.07.2026 11:02
Last: 14.07.2026 11:02
Sources 1
About this happening:
European and North American authorities dismantled First VPN Service (1VPNS) in a ransomware-linked takedown, removing infrastructure used to hide attack origins and o...
Joint operation dismantles First VPN Service (1VPNS)
Law EnforcementAbout this happening: European and North American authorities dismantled First VPN Service (1VPNS) in a ransomware-linked takedown, removing infrastructure used to hide attack origins and o...
OFAC sanctions First VPN Service and two individuals
Regulatory/Legal Action
H score27
First: 14.07.2026 11:02
Last: 14.07.2026 11:02
Sources 1
About this happening:
OFAC sanctioned First VPN Service (1VPNS), Dmytro Rashevskyi, and Yegeniy Vladimirovich Silayev for enabling ransomware attacks and helping malicious software...
OFAC sanctions First VPN Service and two individuals
Regulatory/Legal ActionAbout this happening: OFAC sanctioned First VPN Service (1VPNS), Dmytro Rashevskyi, and Yegeniy Vladimirovich Silayev for enabling ransomware attacks and helping malicious software...
FBI seizes NetNut and Popa botnet domains
Law Enforcement
H score34
First: 02.07.2026 22:27
Last: 02.07.2026 22:27
Sources 1
About this happening:
The FBI seized hundreds of domains tied to NetNut and the Popa botnet, disrupting infrastructure used for abusive traffic and account-takeover activity. Th...
FBI seizes NetNut and Popa botnet domains
Law EnforcementAbout this happening: The FBI seized hundreds of domains tied to NetNut and the Popa botnet, disrupting infrastructure used for abusive traffic and account-takeover activity. Th...
StealC and Amadey infostealer infrastructure disruption
Malware Activity
H score69
First: 24.06.2026 18:25
Last: 24.06.2026 18:25
Sources 1
About this happening:
StealC and Amadey malware infrastructure was disrupted in Operation Endgame, cutting off the command-and-control services used to manage infected systems. Europol said...
StealC and Amadey infostealer infrastructure disruption
Malware ActivityAbout this happening: StealC and Amadey malware infrastructure was disrupted in Operation Endgame, cutting off the command-and-control services used to manage infected systems. Europol said...
Timeline
-
12.03.2026 18:19 2 articles · 4mo ago
U.S. and European law enforcement disrupt SocksEscort proxy network
Legal Policy Action UpdateU.S. and European law enforcement, with private partners, disrupted the SocksEscort cybercrime proxy network on March 12, 2026, seized 34 domains and 23 servers across seven countries, froze $3.5 million in cryptocurrency, and disconnected infected devices that routed criminal traffic through AVRecon-compromised Linux edge devices.
Show sources
- US disrupts SocksEscort proxy network powered by Linux malware — www.bleepingcomputer.com — 12.03.2026 18:19
- Authorities Disrupt SocksEscort Proxy Botnet Exploiting 369,000 IPs Across 163 Countries — thehackernews.com — 13.03.2026 07:26