Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

AudiA6 laundering ecosystem and Dark2Web forum

Threat Actor Meta
First reported
Last updated
Happening score
H score 31
3 unique sources, 3 articles

Summary

Hide ▲

AudiA6 was disrupted as an industrial-scale cryptocurrency laundering service used by ransomware gangs and other cybercriminal networks. Europol said the ecosystem laundered more than €336 million since 2021, used thousands of fraudulent exchange accounts and money-mule records, and was linked to more than 15 investigations worldwide. The same network also included Dark2Web, a dark web forum used to advertise illicit services and connect with other offenders. The June 10, 2026 action led to arrests, domain and server seizures, asset freezes, Telegram blocking, and DoJ charges against two alleged administrators.

Related Happenings

INTERPOL Operation First Light 2026 anti-fraud arrests and seizures

Law Enforcement
H score36 First: 09.07.2026 12:47 Last: 09.07.2026 12:47 Sources 1

About this happening: INTERPOL coordinated Operation First Light 2026, a multinational anti-fraud crackdown spanning 97 countries and territories with support from agencies including China’s Ministry o...

Latest development: 09.07.2026 14:45

The enforcement phase from January 15 to April 30, 2026 turned Operation First Light 2026 into a cross-border crackdown on fraud and cybercrime. Early actions centered on scam networks, money laundering, and the blocking of illicit payments.

Open Happening

StealC and Amadey infostealer infrastructure disruption

Malware Activity
H score69 First: 24.06.2026 18:25 Last: 24.06.2026 18:25 Sources 1

About this happening: StealC and Amadey malware infrastructure was disrupted in Operation Endgame, cutting off the command-and-control services used to manage infected systems. Europol said...

Open Happening

Operation Endgame takedown of Amadey and StealC infrastructure

Law Enforcement
H score66 First: 24.06.2026 18:02 Last: 24.06.2026 18:02 Sources 1

About this happening: An international law-enforcement takedown under Operation Endgame disrupted shared infrastructure used by Amadey and StealC, with Microsoft, Europol, and i...

Open Happening

Treasury sanctions Prince Group-linked entities and FinCEN designates H-Pay Service

Regulatory/Legal Action
H score17 First: 24.06.2026 11:55 Last: 24.06.2026 11:55 Sources 1

About this happening: The U.S. Treasury imposed fresh sanctions on nine individuals and 26 entities linked to Prince Group, while FinCEN designated H-Pay Service PLC as a prim...

Open Happening

Operation Endgame takedown of SocGholish and Evil Corp infrastructure

Law Enforcement
H score58 First: 18.06.2026 16:25 Last: 18.06.2026 16:25 Sources 1

About this happening: International law enforcement disrupted SocGholish/FakeUpdates infrastructure in Operation Endgame on June 18, cleaning 14,971 compromised WordPress websites a...

Open Happening

Timeline

  1. 11.06.2026 18:55 3 articles · 1mo ago

    International authorities dismantle AudiA6 cryptocurrency laundering service

    Legal Policy Action Update

    Law enforcement authorities from 11 countries, supported by Europol and Eurojust, dismantled AudiA6 after linking the service to ransomware actors and other cybercriminals. The coordinated action led to arrests in Georgia, searches of 3 properties, seizures of 25 domains, and the seizure or freezing of cryptocurrency and other assets, while the AudiA6 and Dark2Web websites were later replaced with seizure notices.

    Show sources
    Open in new tab
  2. 11.06.2026 18:55 2 articles · 1mo ago

    Europol details AudiA6 laundering network and ransomware links

    Initial Disclosure

    Europol said AudiA6 acted as a central money laundering hub between 2022 and 2025, built around thousands of fraudulent exchange accounts opened with stolen or purchased identities. The service was linked to more than 15 investigations worldwide involving ransomware attacks and large-scale cryptocurrency theft, and the U.S. Department of Justice named Ruslan Igorevich Tkachuk and Alexander Vladimirovich Ledenev as senior members of the platform.

    Show sources
    Open in new tab