Find notable cyber news and cases, enriched with sources, timelines, and signals.

Europol-led Operation Alice takedown of dark web CSAM and CaaS sites

Law Enforcement
First reported
Last updated
Happening score
H score 20
1 unique sources, 1 articles

Summary

Hide ▲

Europol-backed investigators dismantled Operation Alice's dark web CSAM and CaaS infrastructure, seizing servers and exposing customers across multiple countries. The takedown matters because it removed a large criminal marketplace, identified 440 customers, and triggered an international arrest warrant tied to the alleged operator.

Related Happenings

Europol-led arrests in Albanian scam call center fraud case

Law Enforcement
First: 30.04.2026 13:00 Last: 30.04.2026 13:00 Sources 1

About this happening: **Europol** said a **two-year operation** ended with **10 arrests** at suspected **Albanian scam call centers**, disrupting a professionalized **investment fraud** network. Police...

Austrian-Albanian cryptocurrency fraud ring takedown

Law Enforcement
First: 29.04.2026 17:27 Last: 29.04.2026 17:27 Sources 1

About this happening: Austrian and Albanian authorities **dismantled** a **cryptocurrency investment fraud ring**, escalating a cross-border cyberfraud case that allegedly caused **over €50 million** i...

Operation Alice dark web takedown and arrest warrant

Law Enforcement
First: 20.03.2026 19:19 Last: 20.03.2026 19:19 Sources 1

About this happening: German authorities and Europol **shut down** **Operation Alice**, seizing **287 servers** and disrupting a **dark web CSAM/cybercrime** network that had operated since **mid-2021*...

Operation Lightning takedown of SocksEscort proxy service

Law Enforcement
First: 13.03.2026 12:00 Last: 13.03.2026 12:00 Sources 1

About this happening: International law enforcement partners **dismantled** the **SocksEscort** proxy service in **Operation Lightning**, disrupting a cybercrime network used to hide originating IP add...

DOJ and Europol takedown of SocksEscort proxy network

Law Enforcement
First: 12.03.2026 18:19 Last: 12.03.2026 18:19 Sources 1

About this happening: U.S. and European law enforcement **took down** **SocksEscort**, a long-running cybercrime proxy network that routed traffic through compromised edge devices. The action **seized...

Timeline

  1. 23.03.2026 11:10 2 articles · 2mo ago

    Operation Alice dismantles dark web CSAM and CaaS sites

    Initial Disclosure

    Europol-backed German-led Operation Alice ran from March 9-19, dismantling over 373,000 dark web .onion sites tied to CSAM and CaaS. Investigators used the fraudulent Alice with Violence CP honeypot to identify 440 customers, traced the likely administrator to a man living in China, and said an international arrest warrant had been issued while more than 100 related investigations continued.

    Show sources