Research reports
1,224 reports from 387 publishers45 added in the past week
34 reports, newest added first
Added Tue 7 Apr
Department Disrupts North Korean Remote IT Worker Fraud Schemes Through Charges and Arrest of Nashville Facilitator
NASHVILLE – Matthew Isaac Knoot, 38, of Nashville, Tennessee, was charged today for his efforts to generate revenue for the Democratic People’s Republic of Korea’s (DPRK or North Korea) illicit weapons program, which includes weapons of mass destruction…
Takedowns and arrests
3 North Korean Military Hackers Indicted in Wide-Ranging Scheme to Commit Cyber-attacks and Financial Crimes Across the Globe
LOS ANGELES – A federal indictment unsealed today charges three North Korean computer programmers with participating in a wide-ranging criminal conspiracy to conduct a series of destructive cyber-attacks, to steal and extort more than $1.3 billion of money…
Takedowns and arrests
Russian Botnet Disrupted in International Cyber Operation
SAN DIEGO – The U.S. Department of Justice, together with law enforcement partners in Germany, the Netherlands and the United Kingdom, have dismantled the infrastructure of a Russian botnet known as RSOCKS which hacked millions of computers and other…
Botnets and DDoSTakedowns and arrests
Two Members of Syrian Electronic Army Indicted for Conspiracy
ALEXANDRIA, Va. – A federal grand jury returned an 11-count indictment today charging two Syrian men with offenses relating to their participation in a conspiracy to engage in computer hacking as members of the “Syrian Electronic Army” or “SEA.” Ahmad ‘Umar…
Takedowns and arrests
U.S. Joins International Action Against RedLine and META Infostealers
AUSTIN, Texas – The Department of Justice joined the Netherlands, Belgium, Eurojust and other partners in announcing an international disruption effort against the current version of RedLine Infostealer, one of the most prevalent infostealers in the world…
InfostealersTakedowns and arrests
Added Mon 6 Apr
LockBit's seized darknet site resurrected by police, teasing new revelations
The ransomware service LockBit’s darknet extortion site, which had been shuttered earlier this year after being infiltrated by law enforcement, reappeared on Sunday with police teasing fresh information about the criminals involved. It follows the closure of…
RansomwareTakedowns and arrests
DoppelPaymer FBI PIN on Dec 10, 2020
Private Industry Notification. Local Field Offices: www.fbi.gov/contact-us/field-offices The following information is being provided by the FBI, with no guarantees or warranties, for potential use at the sole discretion of recipients to protect against cyber…
Takedowns and arrests
Added Wed 29 Oct 2025
250912.pdf
The following information is being provided by the FBI, with no guarantees or warranties, for potential use at the sole discretion of recipients to protect against cyber threats. This data is provided in order to help cyber security professionals and system…
Takedowns and arrests
Added Wed 21 May 2025
5Socks TLP-CLEAR FLASH 05.13.25.pdf
O7M ay 2025 The following information is being provided by the FBI, with no guarantees or warranties, for potential use at the sole discretion of recipients to protect against cyber threats. This data is provided in order FLASH Number to help cyber security…
Takedowns and arrests
Added Wed 23 Apr 2025
gru.indictment.pdf
PAVEL VYACHESLA VOVICH YERSHOV, ARTEM ANDREYEVICH MALYSHEV, ALEKSANDR VLADIMIROVICH OSADCHUK, ALEKSEY ALEKSANDROVICH POTEMKIN, and ANATOLIY SERGEYEVICH KOVALEV, Defendants. + ¢ & KF HF H FF HF EF He HF He HH HF RK HN HR HR H KH H HF HK * He HR RR RR CRIMINAL…
Takedowns and arrests
240502.pdf
To report suspicious or criminal activity related to information found in the Joint Cybersecurity Advisory, contact your local FBI field office or submit a report to the FBI Internet Crime Complaint Center (IC3). When available, please include the following…
Takedowns and arrests
Added Tue 24 Sep 2024
redacted_24-mj-1484_signed_search_and_seizure_warrant_for_disclosure.pdf
An application by a federal law enforcement officer or an attorney for the government requests the search of the following person or property located in the Western District of Pennsylvania (identify the person or describe the property to be searched and give…
Takedowns and arrests
Added Thu 20 Jun 2024
CSA-NORTH-KOREAN-ACTORS-EXPLOIT-WEAK-DMARC.PDF
To report suspicious or criminal activity related to information found in the Joint Cybersecurity Advisory, contact your local FBI field office or submit a report to the FBI Internet Crime Complaint Center (IC3). When available, please include the following…
VulnerabilitiesTakedowns and arrests
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.