International agency release

# Botnet taken down through international law enforcement cooperation

Europol, February 25, 2015. Establishes the Europol-coordinated Ramnit infrastructure disruption and the 3.2 million infection estimate..

**Source type:** International agency release

**Published:** February 25, 2015

**Research grade:** P2

**Used in entries:** 5

## Bibliographic record

**Publisher:** Europol

**Published:** February 25, 2015

**Source type:** International agency release

**Research grade:** Source grade P2

**Language:** English

**Official record:** Official publication

**Address:** [https://www.europol.europa.eu/media-press/newsroom/news/botnet-taken-down-through-international-law-enforcement-cooperation](https://www.europol.europa.eu/media-press/newsroom/news/botnet-taken-down-through-international-law-enforcement-cooperation)

**What it supports:** Establishes the Europol-coordinated Ramnit infrastructure disruption and the 3.2 million infection estimate.

**Dataset id:** src\_europol\_ramnit\_2015

How this source is used

Cited 5 times across 3 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[Ramnit botnet disruption](https://takedownindex.org/takedowns/ramnit-botnet-disruption)

Malware and botnets, February 2015

Primary source

### Organization roles

2 citations

Cited for an organization's recorded role in a takedown.

-
[European Union Agency for Law Enforcement Cooperation](https://takedownindex.org/takedowns/ramnit-botnet-disruption)

Coordinator, Ramnit botnet disruption

Primary source
-
[National Crime Agency](https://takedownindex.org/takedowns/ramnit-botnet-disruption)

Operational lead, Ramnit botnet disruption

Primary source

### Infrastructure

2 citations

Cited for infrastructure recorded as acted on.

-
[300 domains](https://takedownindex.org/takedowns/ramnit-botnet-disruption)

Domains redirected, Ramnit botnet disruption

Primary source
-
[Command and control server](https://takedownindex.org/takedowns/ramnit-botnet-disruption)

Command and control server disabled, Ramnit botnet disruption

Primary source

[All sources](https://takedownindex.org/sources)