International agency release

# World's most dangerous malware EMOTET disrupted through global action

Europol, January 27, 2021. Infrastructure takeover, participating authorities, Ukrainian arrests, infection scale.

**Source type:** International agency release

**Published:** January 27, 2021

**Research grade:** P2

**Used in entries:** 8

## Bibliographic record

**Publisher:** Europol

**Published:** January 27, 2021

**Source type:** International agency release

**Research grade:** Source grade P2

**Language:** English

**Official record:** Official publication

**Address:** No address recorded for this source. Publisher, title, and date are given so it can be retrieved from the publisher.

**What it supports:** Infrastructure takeover, participating authorities, Ukrainian arrests, infection scale

**Dataset id:** src\_europol\_emotet\_2021

## Research notes

- URL not re-verified in this pass.

How this source is used

Cited 8 times across 3 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 20, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[Operation Ladybird](https://takedownindex.org/takedowns/operation-ladybird)

Malware and botnets, January 2021

Primary source

### Organization roles

5 citations

Cited for an organization's recorded role in a takedown.

-
[European Union Agency for Law Enforcement Cooperation](https://takedownindex.org/takedowns/operation-ladybird)

Coordinator, Operation Ladybird

Primary source
-
[Politie (Netherlands National Police)](https://takedownindex.org/takedowns/operation-ladybird)

Co-lead, Operation Ladybird

Primary source
-
[Bundeskriminalamt](https://takedownindex.org/takedowns/operation-ladybird)

Co-lead, Operation Ladybird

Primary source
-
[Cyberpolice Department of the National Police of Ukraine](https://takedownindex.org/takedowns/operation-ladybird)

Arresting, Operation Ladybird

Primary source
-
[European Union Agency for Criminal Justice Cooperation](https://takedownindex.org/takedowns/operation-ladybird)

Judicial cooperation, Operation Ladybird

Primary source

### Infrastructure

2 citations

Cited for infrastructure recorded as acted on.

-
[approximately 700 command and control servers](https://takedownindex.org/takedowns/operation-ladybird)

Command and control servers taken over, Operation Ladybird

Primary source
-
[approximately 1,600,000 malware installations](https://takedownindex.org/takedowns/operation-ladybird)

Malware installations remediated, Operation Ladybird

Primary source

[All sources](https://takedownindex.org/sources)