RedVDS takedown with US, UK and Europol support
Law Enforcement
Summary
Hide ▲
Show ▼
Microsoft said it took coordinated legal action in the U.S. and U.K. to disrupt RedVDS, seizing redvds[.]com and related infrastructure with support from Europol and German authorities. The cybercrime subscription service allegedly fueled millions in fraud losses and enabled phishing, business email compromise (BEC), and credential theft through disposable Windows virtual computers and other scam tooling. Microsoft said RedVDS-linked activity had driven roughly US $40 million in reported fraud losses in the United States since March 2025 and had led to compromise or fraudulent access of more than 191,000 organizations worldwide since September 2025.
Related Happenings
Microsoft civil action against Fox Tempest infrastructure takedown
Regulatory/Legal Action
First: 19.05.2026 18:00
Last: 19.05.2026 18:00
Sources 1
About this happening:
Microsoft filed a **civil action** against **Fox Tempest** in the **US District Court for the Southern District of New York**, securing a **court order** that enabled a broad disr...
Microsoft civil action against Fox Tempest infrastructure takedown
Regulatory/Legal ActionAbout this happening: Microsoft filed a **civil action** against **Fox Tempest** in the **US District Court for the Southern District of New York**, securing a **court order** that enabled a broad disr...
Microsoft Zero Day Quest $2.3M bounty payout
Commercial Activity
First: 15.04.2026 19:20
Last: 15.04.2026 19:20
Sources 1
About this happening:
Microsoft **awarded $2.3 million** to researchers through **Zero Day Quest**, turning the contest into a major payout event for **cloud and AI security** testing. The live event a...
Microsoft Zero Day Quest $2.3M bounty payout
Commercial ActivityAbout this happening: Microsoft **awarded $2.3 million** to researchers through **Zero Day Quest**, turning the contest into a major payout event for **cloud and AI security** testing. The live event a...
Europol-led Operation Alice takedown of dark web CSAM and CaaS sites
Law Enforcement
First: 23.03.2026 11:10
Last: 23.03.2026 11:10
Sources 1
About this happening:
**Europol-backed investigators** dismantled **Operation Alice**'s dark web **CSAM** and **CaaS** infrastructure, **seizing servers** and exposing customers across multiple countri...
Europol-led Operation Alice takedown of dark web CSAM and CaaS sites
Law EnforcementAbout this happening: **Europol-backed investigators** dismantled **Operation Alice**'s dark web **CSAM** and **CaaS** infrastructure, **seizing servers** and exposing customers across multiple countri...
Operation Alice dark web takedown and arrest warrant
Law Enforcement
First: 20.03.2026 19:19
Last: 20.03.2026 19:19
Sources 1
About this happening:
German authorities and Europol **shut down** **Operation Alice**, seizing **287 servers** and disrupting a **dark web CSAM/cybercrime** network that had operated since **mid-2021*...
Operation Alice dark web takedown and arrest warrant
Law EnforcementAbout this happening: German authorities and Europol **shut down** **Operation Alice**, seizing **287 servers** and disrupting a **dark web CSAM/cybercrime** network that had operated since **mid-2021*...
DOJ and Europol takedown of SocksEscort proxy network
Law Enforcement
First: 12.03.2026 18:19
Last: 12.03.2026 18:19
Sources 1
About this happening:
U.S. and European law enforcement **took down** **SocksEscort**, a long-running cybercrime proxy network that routed traffic through compromised edge devices. The action **seized...
DOJ and Europol takedown of SocksEscort proxy network
Law EnforcementAbout this happening: U.S. and European law enforcement **took down** **SocksEscort**, a long-running cybercrime proxy network that routed traffic through compromised edge devices. The action **seized...
Timeline
-
14.01.2026 18:32 3 articles · 4mo ago
RedVDS seized in coordinated US, UK, and Europol action
Legal Policy Action UpdateMicrosoft seized the website and infrastructure of RedVDS on Wednesday January 14, 2026, with legal partners in the US and UK and support from Europol. RedVDS was a cybercrime-as-a-service platform that sold access to phishing and fraud tooling, including disposable virtual computers running unlicensed Windows software and AI-assisted scam content for phishing and business email compromise. Microsoft said RedVDS-supported campaigns had caused over $40 million in losses in the US since March 2025 and had affected nearly 190,000 organizations worldwide, including H2-Pharma and Gatehouse Dock Condominium Association.
Show sources
- Criminal Subscription Service Behind AI-Powered Cyber-Attacks Taken Out By Microsoft — www.infosecurity-magazine.com — 14.01.2026 18:32
- Criminal Subscription Service Behind AI-Powered Cyber-Attacks Taken Out By Microsoft — www.infosecurity-magazine.com — 14.01.2026 18:32
- Microsoft Legal Action Disrupts RedVDS Cybercrime Infrastructure Used for Online Fraud — thehackernews.com — 15.01.2026 11:37