Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Europol-led Operation Alice takedown of dark web CSAM and CaaS sites

Law Enforcement
First reported
Last updated
Happening score
H score 65
1 unique sources, 1 articles

Summary

Hide ▲

Europol-backed investigators dismantled Operation Alice's dark web CSAM and CaaS infrastructure, seizing servers and exposing customers across multiple countries. The takedown matters because it removed a large criminal marketplace, identified 440 customers, and triggered an international arrest warrant tied to the alleged operator.

Related Happenings

Europol-led arrests in Albanian scam call center fraud case

Law Enforcement
H score23 First: 30.04.2026 13:00 Last: 30.04.2026 13:00 Sources 1

About this happening: Europol said a two-year operation ended with 10 arrests at suspected Albanian scam call centers, disrupting a professionalized investment fraud network. Police...

Open Happening

Austrian-Albanian cryptocurrency fraud ring takedown

Law Enforcement
H score64 First: 29.04.2026 17:27 Last: 29.04.2026 17:27 Sources 1

About this happening: Austrian and Albanian authorities dismantled a cryptocurrency investment fraud ring, escalating a cross-border cyberfraud case that allegedly caused over €50 million i...

Open Happening

Operation Alice dark web takedown and arrest warrant

Law Enforcement
H score65 First: 20.03.2026 19:19 Last: 20.03.2026 19:19 Sources 1

About this happening: German authorities and Europol shut down Operation Alice, seizing 287 servers and disrupting a dark web CSAM/cybercrime network that had operated since mid-2021*...

Open Happening

Operation Lightning takedown of SocksEscort proxy service

Law Enforcement
H score33 First: 13.03.2026 12:00 Last: 13.03.2026 12:00 Sources 1

About this happening: International law enforcement partners dismantled the SocksEscort proxy service in Operation Lightning, disrupting a cybercrime network used to hide originating IP add...

Open Happening

DOJ and Europol takedown of SocksEscort proxy network

Law Enforcement
H score19 First: 12.03.2026 18:19 Last: 12.03.2026 18:19 Sources 1

About this happening: U.S. and European law enforcement took down SocksEscort, a long-running cybercrime proxy network that routed traffic through compromised edge devices. The action seized...

Open Happening

Timeline

  1. 23.03.2026 11:10 2 articles · 3mo ago

    Operation Alice dismantles dark web CSAM and CaaS sites

    Initial Disclosure

    Europol-backed German-led Operation Alice ran from March 9-19, dismantling over 373,000 dark web .onion sites tied to CSAM and CaaS. Investigators used the fraudulent Alice with Violence CP honeypot to identify 440 customers, traced the likely administrator to a man living in China, and said an international arrest warrant had been issued while more than 100 related investigations continued.

    Show sources
    Open in new tab