Participating company report

# Avalanche year two, this time with Andromeda

The Shadowserver Foundation, December 4, 2017. Sinkhole operation and long-running victim notification.

**Source type:** Participating company report

**Published:** December 4, 2017

**Research grade:** T1

**Used in entries:** 2

## Bibliographic record

**Publisher:** The Shadowserver Foundation

**Published:** December 4, 2017

**Source type:** Participating company report

**Research grade:** Source grade T1

**Language:** English

**Official record:** Not an official publication

**Address:** [https://www.shadowserver.org/news/avalanche-year-two-this-time-with-andromeda/](https://www.shadowserver.org/news/avalanche-year-two-this-time-with-andromeda/)

**What it supports:** Sinkhole operation and long-running victim notification

**Dataset id:** src\_shadowserver\_avalanche\_2016

## Research notes

- Official participant retrospective, published one year after the action rather than on the input source date.

How this source is used

Cited 2 times across 2 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[Avalanche network takedown](https://takedownindex.org/takedowns/avalanche-network-takedown)

Criminal hosting and proxies, November 2016

Supporting source

### Organization roles

1 citation

Cited for an organization's recorded role in a takedown.

-
[The Shadowserver Foundation](https://takedownindex.org/takedowns/avalanche-network-takedown)

Technical partner, Avalanche network takedown

Technical evidence

[All sources](https://takedownindex.org/sources)