News report

# FluBot Android malware operation shutdown by law enforcement

BleepingComputer, June 1, 2022. That the May 2022 action put FluBot's infrastructure under law-enforcement control, and the contrast with the March 2021 arrests, after which the malware did resurge - the basis for treating the 2022 action as terminal..

**Source type:** News report

**Published:** June 1, 2022

**Research grade:** S2

**Used in entries:** 1

## Bibliographic record

**Publisher:** BleepingComputer

**Published:** June 1, 2022

**Source type:** News report

**Research grade:** Source grade S2

**Language:** English

**Official record:** Not an official publication

**Address:** [https://www.bleepingcomputer.com/news/security/flubot-android-malware-operation-shutdown-by-law-enforcement/](https://www.bleepingcomputer.com/news/security/flubot-android-malware-operation-shutdown-by-law-enforcement/)

**What it supports:** That the May 2022 action put FluBot's infrastructure under law-enforcement control, and the contrast with the March 2021 arrests, after which the malware did resurge - the basis for treating the 2022 action as terminal.

**Dataset id:** src\_bleepingcomputer\_flubot\_shutdown\_2022

## Research notes

- By Bill Toulas. JSON-LD datePublished 2022-06-01T09:31:39-04:00; page date line reads 'June 1, 2022'. This is the date the page carries, not a month-start stand-in.
- The 'no re-ignite' line is quoted from Europol's announcement, not BleepingComputer's own assessment.
- The article itself notes FluBot came back after the earlier March 2021 Spanish arrests, so the claim of finality rests on infrastructure control, not on arrests.

How this source is used

Cited 1 time across 1 record type.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Later activity

1 citation

Cited for activity recorded after the takedown.

-
[No documented return](https://takedownindex.org/takedowns/flubot-disruption)

Relationship not established, FluBot disruption

Supporting source

[All sources](https://takedownindex.org/sources)