[Back to Coreflood botnet disruption](https://takedownindex.org/takedowns/coreflood-botnet-disruption)

# Organizations and roles

April 2011, Malware and botnets
[Coreflood botnet disruption](https://takedownindex.org/takedowns/coreflood-botnet-disruption)

Last reviewed August 21, 2026

The public record puts 2 organizations on this action. Operational lead: DOJ and FBI. The table lists the role the cited record assigns each one, in the record's own wording where it gives any.

## Why this page names organizations only

Roles on this page describe the agencies that took part. Individuals named in the public record appear on the takedown entry itself, under People and accountability.

## Organizations and roles

| Emblem | Organization | Role | What the record says |
| --- | --- | --- | --- |
| | [United States Department of Justice](https://takedownindex.org/organizations/united-states-department-of-justice), United States | Operational lead | Directed the civil and criminal legal process. |
| | [Federal Bureau of Investigation](https://takedownindex.org/organizations/federal-bureau-of-investigation), United States | Co-lead | Executed the technical seizure and substitute-server operation. |

## Accountability

### Legal authority

Civil complaint; criminal seizure warrants; temporary restraining order and injunctive relief (D. Conn.)

This page records organizational involvement as the cited sources state it. Where a role carries no description, the record gives none.

Last reviewed August 21, 2026