Cybersecurity report

# Simda’s Hide and Seek: Grown-up Games

Securelist (Kaspersky Lab), April 13, 2015. The technical outcome of the 9 April 2015 Simda takedown - 14 command-and-control servers seized in the Netherlands, USA, Luxembourg, Poland and Russia, sinkholed server logs showing 190 affected countries - and the design characteristics of Simda used to argue it left little for a successor to inherit..

**Source type:** Cybersecurity report

**Published:** April 13, 2015

**Research grade:** T2

**Used in entries:** 1

## Bibliographic record

**Publisher:** Securelist (Kaspersky Lab)

**Published:** April 13, 2015

**Source type:** Cybersecurity report

**Research grade:** Source grade T2

**Language:** English

**Official record:** Not an official publication

**Address:** [https://securelist.com/simdas-hide-and-seek-grown-up-games/69580/](https://securelist.com/simdas-hide-and-seek-grown-up-games/69580/)

**What it supports:** The technical outcome of the 9 April 2015 Simda takedown - 14 command-and-control servers seized in the Netherlands, USA, Luxembourg, Poland and Russia, sinkholed server logs showing 190 affected countries - and the design characteristics of Simda used to argue it left little for a successor to inherit.

**Dataset id:** src\_securelist\_simda\_2015

## Research notes

- By Vitaly Kamluk. Page byline block reads 'Incidents 13 Apr 2015'; JSON-LD datePublished 2015-04-13T04:30:04+00:00.
- Kaspersky Lab was a participant in the takedown but this post is vendor threat research rather than an official partner release, hence T2.

How this source is used

Cited 1 time across 1 record type.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Later activity

1 citation

Cited for activity recorded after the takedown.

-
[No documented return](https://takedownindex.org/takedowns/simda-botnet-disruption)

Relationship not established, Simda botnet disruption

Technical evidence

[All sources](https://takedownindex.org/sources)