News report

# International Action Targets Emotet Crimeware

KrebsOnSecurity, January 27, 2021. The Ukrainian cyberpolice's role in the Emotet takedown: the National Police of Ukraine identified two Ukrainian citizens who 'ensured the proper functioning of the infrastructure for the spread of the virus and maintained its smooth operation', and conducted searches seizing cash, computer equipment and bank cards — identifications and searches rather than confirmed arrests..

**Source type:** News report

**Published:** January 27, 2021

**Research grade:** S2

**Used in entries:** 2

## Bibliographic record

**Publisher:** KrebsOnSecurity

**Published:** January 27, 2021

**Source type:** News report

**Research grade:** Source grade S2

**Language:** English

**Official record:** Not an official publication

**Address:** [https://krebsonsecurity.com/2021/01/international-action-targets-emotet-crimeware/](https://krebsonsecurity.com/2021/01/international-action-targets-emotet-crimeware/)

**What it supports:** The Ukrainian cyberpolice's role in the Emotet takedown: the National Police of Ukraine identified two Ukrainian citizens who 'ensured the proper functioning of the infrastructure for the spread of the virus and maintained its smooth operation', and conducted searches seizing cash, computer equipment and bank cards — identifications and searches rather than confirmed arrests.

**Dataset id:** src\_krebsonsecurity\_emotet\_2021

## Research notes

- Byline: Brian Krebs.
- Krebs quotes a Ukrainian police loss estimate of more than $2 billion globally and calls it conservative; the article describes identifications and raids, not stated arrests.

How this source is used

Cited 2 times across 2 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[Operation Ladybird](https://takedownindex.org/takedowns/operation-ladybird)

Malware and botnets, January 2021

Supporting source

### Organization roles

1 citation

Cited for an organization's recorded role in a takedown.

-
[Cyberpolice Department of the National Police of Ukraine](https://takedownindex.org/takedowns/operation-ladybird)

Investigating, Operation Ladybird

Supporting source

[All sources](https://takedownindex.org/sources)