Public record database
The Internet Takedown Index documents law enforcement seizures, sinkholes, takeovers, and shutdowns of criminal internet infrastructure. Every entry traces to a cited source.
| Takedown | Date | Category | Lead organization | Jurisdiction | Status Derived from the recorded end date. A date in the past reads Completed, no date reads Ongoing. The dataset carries no separate status column. |
|---|---|---|---|---|---|
| Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption ID: td_2026_aisuru_family | Mar 19, 2026 | Malware and botnets | USAO-AK and FBI | Not established | Completed |
| INTERPOL Operation Secure ID: td_2025_operation_secure | Jun 11, 2025 | Malware and botnets | INTERPOL | Not established | Completed |
| Lumma Stealer disruption ID: td_2025_lumma | May 13, 2025 | Malware and botnets | Microsoft DCU and DOJ | International | Completed |
| Operation Magnus (RedLine and META infostealers) ID: td_2024_operation_magnus | Oct 28, 2024 | Malware and botnets | Dutch National Police | Not established | Completed |
| 911 S5 botnet dismantlement ID: td_2024_911_s5 | May 24, 2024 | Malware and botnets | FBI | International | Completed |
| IPStorm botnet dismantlement ID: td_2023_ipstorm | Nov 1, 2023 | Malware and botnets | FBI | Not established | Completed |
| Operation Duck Hunt ID: td_2023_qakbot | Aug 25, 2023 | Malware and botnets | FBI | International | Completed |
| FluBot disruption ID: td_2022_flubot | Jun 1, 2022 | Malware and botnets | Dutch National Police | Not established | Completed |
| Operation Ladybird ID: td_2021_emotet | Jan 26, 2021 | Malware and botnets | Dutch National Police and BKA | International | Completed |
| 3ve ad-fraud botnet disruption ID: td_2018_3ve | Nov 27, 2018 | Malware and botnets | FBI | Not established | Completed |
| Dridex/Bugat/Cridex disruption ID: td_2015_dridex | Oct 13, 2015 | Malware and botnets | FBI and NCA | Not established | Completed |
| Operation Source / Beebone botnet disruption ID: td_2015_beebone | Apr 8, 2015 | Malware and botnets | Dutch National Police | Not established | Completed |
| Simda botnet disruption ID: td_2015_simda | Apr 1, 2015 | Malware and botnets | Not established | Not established | Completed |
| Ramnit botnet disruption ID: td_2015_ramnit | Feb 24, 2015 | Malware and botnets | Not established | Not established | Completed |
| Operation Tovar ID: td_2014_gameover_zeus | May 30, 2014 | Malware and botnets | FBI and NCA | International | Completed |
| ZeroAccess botnet disruption ID: td_2013_zeroaccess | Dec 5, 2013 | Malware and botnets | FBI | Not established | Completed |
| Citadel botnet disruption ID: td_2013_citadel | Jun 5, 2013 | Malware and botnets | FBI | Not established | Completed |
| Operation Ghost Click ID: td_2011_dnschanger | Nov 8, 2011 | Malware and botnets | FBI | Not established | Completed |
| Coreflood botnet disruption ID: td_2011_coreflood | Apr 13, 2011 | Malware and botnets | DOJ and FBI | Not established | Completed |
Showing 1 to 19 of 19 takedowns
19 results
March 2026
Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets Malware and botnets
June 2025
Infostealer malware infrastructure (26-country action) Malware and botnets
May 2025
Lumma Stealer Malware and botnets
October 2024
RedLine Stealer and META Stealer Malware and botnets
May 2024
911 S5 Malware and botnets
November 2023
IPStorm Malware and botnets
August 2023
Qakbot Malware and botnets
June 2022
FluBot Malware and botnets
January 2021
Emotet Malware and botnets
November 2018
3ve ("Eve") Malware and botnets
October 2015
Dridex (also known as Bugat/Cridex) Malware and botnets
April 2015
Beebone Malware and botnets
Simda Malware and botnets
February 2015
Ramnit Malware and botnets
May 2014
Gameover Zeus botnet and CryptoLocker ransomware Malware and botnets
December 2013
ZeroAccess Malware and botnets
June 2013
Citadel Malware and botnets
November 2011
DNSChanger Malware and botnets
April 2011
Coreflood Malware and botnets
Filter takedowns