Europol-led AudiA6 crypto-laundering takedown
Law Enforcement
Summary
Hide ▲
Show ▼
Law enforcement dismantled AudiA6 in a ransomware-linked cryptocurrency laundering case, disrupting a service used to move more than $380 million in illicit funds. The multinational action led to 2 arrests in Georgia, domain seizures, and blocked network accounts. It also cut off a laundering hub connected to more than 15 ransomware investigations worldwide.
Related Happenings
AudiA6 laundering ecosystem and Dark2Web forum
Threat Actor Meta
H score31
First: 11.06.2026 18:55
Last: 11.06.2026 18:55
Sources 1
How related:
“Investigators uncovered what they describe as an industrial-scale cryptocurrency laundering operation built around thousands of fraudulent exchange accounts opened using stolen or purchased identities,” describes Europol says.
About this happening:
**AudiA6**'s laundering ecosystem was disrupted, cutting off a service that moved **more than $380 million** for **ransomware actors** and other cybercriminals. The network's scal...
AudiA6 laundering ecosystem and Dark2Web forum
Threat Actor MetaHow related: “Investigators uncovered what they describe as an industrial-scale cryptocurrency laundering operation built around thousands of fraudulent exchange accounts opened using stolen or purchased identities,” describes Europol says.
About this happening: **AudiA6**'s laundering ecosystem was disrupted, cutting off a service that moved **more than $380 million** for **ransomware actors** and other cybercriminals. The network's scal...
DoJ Disruption Week crypto fraud takedown
Law Enforcement
H score46
First: 04.06.2026 09:06
Last: 04.06.2026 09:06
Sources 1
About this happening:
Authorities **arrested** seven scammers in Thailand and disrupted a **crypto fraud** network tied to **Disruption Week**, expanding pressure on transnational scam operations targe...
DoJ Disruption Week crypto fraud takedown
Law EnforcementAbout this happening: Authorities **arrested** seven scammers in Thailand and disrupted a **crypto fraud** network tied to **Disruption Week**, expanding pressure on transnational scam operations targe...
Operation KRATOS 2 streaming piracy crackdown
Law Enforcement
H score55
First: 03.06.2026 13:12
Last: 03.06.2026 13:12
Sources 1
About this happening:
**European and international law enforcement** dismantled **nine organized crime groups** and arrested **29 suspects** in **Operation KRATOS 2**, a cross-border crackdown on **ill...
Operation KRATOS 2 streaming piracy crackdown
Law EnforcementAbout this happening: **European and international law enforcement** dismantled **nine organized crime groups** and arrested **29 suspects** in **Operation KRATOS 2**, a cross-border crackdown on **ill...
First VPN takedown by Europol and French-Dutch authorities
Law Enforcement
H score20
First: 21.05.2026 16:09
Last: 21.05.2026 16:09
Sources 1
About this happening:
**Europol** and **French and Dutch authorities** took **First VPN** offline in a cross-border operation that also **seized servers** and **arrested the administrator**. The case m...
First VPN takedown by Europol and French-Dutch authorities
Law EnforcementAbout this happening: **Europol** and **French and Dutch authorities** took **First VPN** offline in a cross-border operation that also **seized servers** and **arrested the administrator**. The case m...
Phobos long-running ransomware-as-a-service operation and broad distribution
Threat Actor Meta
H score21
First: 17.02.2026 13:31
Last: 17.02.2026 13:31
Sources 1
About this happening:
**Phobos** remains a **long-running ransomware-as-a-service** operation linked to the **Crysis** family, with a broad affiliate ecosystem that has driven repeated intrusions world...
Phobos long-running ransomware-as-a-service operation and broad distribution
Threat Actor MetaAbout this happening: **Phobos** remains a **long-running ransomware-as-a-service** operation linked to the **Crysis** family, with a broad affiliate ecosystem that has driven repeated intrusions world...
Latest development: 05.03.2026 10:34
Evgenii Ptitsyn pleaded guilty to wire fraud conspiracy for administering Phobos ransomware, a long-running RaaS operation linked to the Crysis ransomware family. The U.S. Department of Justice says Phobos collected more than $39 million in ransom payments from over 1,000 public and private entities worldwide, and Ptitsyn was extradited from South Korea in November 2024 before the plea.
Timeline
-
11.06.2026 18:55 2 articles · 2h ago
Law enforcement dismantles AudiA6 and arrests two suspects in Georgia
Legal Policy Action UpdateLaw enforcement dismantles the AudiA6 cryptocurrency laundering service and arrests two suspected administrators in Georgia, seizing 25 domains, 80 vehicles and properties, €86,000 in cryptocurrency, freezing €692,000, and blocking Telegram accounts used by the network. The coordinated investigation spans authorities from 11 countries across Europe, America, and Asia, with Europol and Eurojust support.
Show sources
- Authorities dismantle 'AudiA6' ransomware crypto-laundering service — www.bleepingcomputer.com — 11.06.2026 18:55
- Authorities dismantle 'AudiA6' ransomware crypto-laundering service — www.bleepingcomputer.com — 11.06.2026 18:55
-
11.06.2026 18:55 1 articles · 2h ago
Europol links AudiA6 to more than 15 ransomware investigations
Technical Analysis UpdateEuropol links AudiA6 to more than 15 ransomware and cryptocurrency-theft investigations worldwide and says the service operated as an industrial-scale laundering hub built around thousands of fraudulent exchange accounts opened with stolen or purchased identities. The platform is believed to have acted as a central money laundering hub between 2022 and 2025, moving illicit proceeds through complex transaction routes before returning cleaned funds to users.
Show sources
- Authorities dismantle 'AudiA6' ransomware crypto-laundering service — www.bleepingcomputer.com — 11.06.2026 18:55