Cybersecurity report

# Emotet botnet disrupted following global law enforcement operation

ESET WeLiveSecurity, January 28, 2021. Technical description of the takeover and the planned uninstall module.

**Source type:** Cybersecurity report

**Published:** January 28, 2021

**Research grade:** T2

**Used in entries:** 2

## Bibliographic record

**Publisher:** ESET WeLiveSecurity

**Published:** January 28, 2021

**Source type:** Cybersecurity report

**Research grade:** Source grade T2

**Language:** English

**Official record:** Not an official publication

**Address:** [https://www.welivesecurity.com/2021/01/28/emotet-botnet-disrupted-global-operation/](https://www.welivesecurity.com/2021/01/28/emotet-botnet-disrupted-global-operation/)

**What it supports:** Technical description of the takeover and the planned uninstall module

**Dataset id:** src\_welivesecurity\_emotet\_2021

## Research notes

- URL verified as present in the research record.

How this source is used

Cited 2 times across 2 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 20, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[Operation Ladybird](https://takedownindex.org/takedowns/operation-ladybird)

Malware and botnets, January 2021

Supporting source

### Later activity

1 citation

Cited for activity recorded after the takedown.

-
[Emotet resurgence](https://takedownindex.org/takedowns/operation-ladybird)

Same service on replacement infrastructure, Operation Ladybird

Technical evidence

[All sources](https://takedownindex.org/sources)