Cybercrime takedowns & arrests

Takedowns rarely end a cybercrime operation, but they raise its costs: seized servers, frozen crypto, arrested operators and exposed infrastructure. We cover police and prosecutors' actions against ransomware crews, malware operators, phishing services and the Indian mule-account and call-centre networks behind cyber fraud, with what each action actually achieved.

For the groups themselves, see our threat actor profiles; for India-specific enforcement, see the India desk.