techcrunch.com FBI Seizes Major Cybercrime Forums Cracked and Nulled
Article Content
- •The FBI seized domains of Cracked and Nulled forums on October 15, 2026.
- •These forums had millions of users and facilitated the trade of stolen data and hacking tools.
- •The operation is part of a larger effort to combat cybercrime across Europe and the U.S.
On October 15, 2026, the FBI, in collaboration with European authorities, seized domain names associated with the cybercrime forums Cracked and Nulled. These forums were known for facilitating the trade of stolen data, hacking tools, and malware, with millions of users. The operation, part of a broader initiative to combat cybercrime, targeted eight domains linked to Cracked and its payment processor, Sellix. Additionally, two anonymity services advertised on these forums were also seized. The crackdown follows a history of these forums being used for illicit activities, including the sale of compromised data and hacking services. The seizure aims to disrupt the operations of these platforms and reduce the availability of cybercriminal resources.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track 1337 Services GmbH in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What services were seized?
How many users were affected?
What was the purpose of the seizure?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Critical SQL Injection Zero-Day in Arista VeloCloud Orchestrator Exploited Arista Networks has patched a critical zero-day vulnerability (CVE-2026-114625) in its VeloCloud Orchestrator (VCO) that is actively being exploited. The flaw allows authenticated users, even those with basic privileges, to escalate their access to superuser status via a low-complexity SQL injection attack. This…