# Federal Bureau of Investigation
Law enforcement

Federal Bureau of Investigation (FBI) is a law enforcement agency recorded in United States. It appears in 54 takedowns in this index and is recorded as leading 49 of them.

**Country / jurisdiction:** United States

**Type:** Law enforcement

**Short name:** FBI

**Parent organization:** [United States Department of Justice](https://takedownindex.org/organizations/united-states-department-of-justice)

Takedowns 54 Recorded participation

Led 49 Recorded as lead or co-lead

Jurisdictions 23 Countries in the operation scope

Partners 48 Organizations it worked alongside

People actioned 12 Named people in its actions

- [Overview](https://takedownindex.org/organizations/federal-bureau-of-investigation)
- [Takedowns](https://takedownindex.org/organizations/federal-bureau-of-investigation/operations)
- [Partners](https://takedownindex.org/organizations/federal-bureau-of-investigation/partners)
- [Jurisdictions](https://takedownindex.org/organizations/federal-bureau-of-investigation/jurisdictions)

## Takedowns (54)

Every takedown this organization is recorded as leading or supporting.

All roles
- [All roles](https://takedownindex.org/organizations/federal-bureau-of-investigation/operations)
- [Led (40)](https://takedownindex.org/organizations/federal-bureau-of-investigation/operations?role=lead)
- [Co-led (9)](https://takedownindex.org/organizations/federal-bureau-of-investigation/operations?role=co_lead)
- [Supported (4)](https://takedownindex.org/organizations/federal-bureau-of-investigation/operations?role=supporting)
- [Investigated (1)](https://takedownindex.org/organizations/federal-bureau-of-investigation/operations?role=investigating)

| Takedown | Category | Recorded role | Jurisdictions | Date |
| --- | --- | --- | --- | --- |
| [Huione Group backend infrastructure seizure](https://takedownindex.org/takedowns/huione-group-backend-infrastructure-seizure) | Cryptocurrency laundering | Led | Scope not recorded | June 23, 2026 |
| [GRU DNS-hijacking router network disruption (APT28)](https://takedownindex.org/takedowns/gru-dns-hijacking-router-network-disruption-apt28) | State sponsored | Led | Scope not recorded | April 1, 2026 |
| [Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption) | Malware and botnets | Co-led | Scope not recorded | March 19, 2026 |
| [LeakBase seizure](https://takedownindex.org/takedowns/leakbase-seizure) | Fraud and stolen data | Led | Scope not recorded | March 4, 2026 |
| [SocksEscort proxy network disruption](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption) | Criminal hosting and proxies | Led | Scope not recorded | March 1, 2026 |
| [Cracked and Nulled forums takedown](https://takedownindex.org/takedowns/cracked-and-nulled-forums-takedown) | Criminal hosting and proxies | Led | Scope not recorded | January 30, 2025 |
| [HeartSender takedown](https://takedownindex.org/takedowns/heartsender-takedown) | Fraud and stolen data | Led | Scope not recorded | January 30, 2025 |
| [Operation Magnus (RedLine and META infostealers)](https://takedownindex.org/takedowns/operation-magnus-redline-and-meta-infostealers) | Malware and botnets | Supported | Scope not recorded | October 28, 2024 |
| [Raptor Train botnet disruption](https://takedownindex.org/takedowns/raptor-train-botnet-disruption) | State sponsored | Led | 2 | September 1, 2024 |
| [Radar/Dispossessor ransomware disruption](https://takedownindex.org/takedowns/radar-dispossessor-ransomware-disruption) | Ransomware | Led | Scope not recorded | August 12, 2024 |
| [911 S5 botnet dismantlement](https://takedownindex.org/takedowns/911-s5-botnet-dismantlement) | Malware and botnets | Led | 4 | May 24, 2024 |
| [BreachForums domain seizure](https://takedownindex.org/takedowns/breachforums-domain-seizure) | Fraud and stolen data | Led | 3 | May 15, 2024 |
| [Samourai Wallet seizure](https://takedownindex.org/takedowns/samourai-wallet-seizure) | Cryptocurrency laundering | Supported | Scope not recorded | April 24, 2024 |
| [Operation Cronos wave 1](https://takedownindex.org/takedowns/operation-cronos-wave-1) | Ransomware | Co-led | 13 | February 19, 2024 |
| [ALPHV/BlackCat disruption](https://takedownindex.org/takedowns/alphv-blackcat-disruption) | Ransomware | Led | Scope not recorded | December 19, 2023 |
| [Kingdom Market seizure](https://takedownindex.org/takedowns/kingdom-market-seizure) | Darknet market | Led | Scope not recorded | December 1, 2023 |
| [KV Botnet disruption](https://takedownindex.org/takedowns/kv-botnet-disruption) | State sponsored | Led | 1 | December 1, 2023 |
| [Sinbad cryptocurrency mixer seizure](https://takedownindex.org/takedowns/sinbad-cryptocurrency-mixer-seizure) | Cryptocurrency laundering | Co-led | Scope not recorded | November 27, 2023 |
| [IPStorm botnet dismantlement](https://takedownindex.org/takedowns/ipstorm-botnet-dismantlement) | Malware and botnets | Led | Scope not recorded | November 1, 2023 |
| [Operation Duck Hunt](https://takedownindex.org/takedowns/operation-duck-hunt) | Malware and botnets | Led | 7 | August 25, 2023 |
| [LolekHosted seizure](https://takedownindex.org/takedowns/lolekhosted-seizure) | Criminal hosting and proxies | Led | Scope not recorded | August 8, 2023 |
| [Operation MEDUSA](https://takedownindex.org/takedowns/operation-medusa) | State sponsored | Led | 5 | May 8, 2023 |
| [Operation Cookie Monster](https://takedownindex.org/takedowns/operation-cookie-monster) | Fraud and stolen data | Co-led | 4 | April 4, 2023 |
| [BreachForums shutdown following administrator arrest](https://takedownindex.org/takedowns/breachforums-shutdown-following-administrator-arrest) | Fraud and stolen data | Led | 1 | March 21, 2023 |
| [ChipMixer takedown](https://takedownindex.org/takedowns/chipmixer-takedown) | Cryptocurrency laundering | Co-led | Scope not recorded | March 15, 2023 |

Showing 1 to 25 of 54 takedowns