Global Operation Alice Shuts Down 373,000 Fraudulent Dark Web Sites

Global Operation Alice Shuts Down 373,000 Fraudulent Dark Web Sites

First seen 20 Mar 2026, 19:27 UTC BleepingcomputerUk.PcmagEscudodigitalMacaubusinessSecurityaffairs.Co+7 68.0

Article Content

Browse articles
ThreatCluster

A coalition of 23 countries, led by German authorities and supported by Europol, has successfully shut down over 373,000 dark web sites involved in fraudulent activities, particularly advertising fake child sexual abuse material (CSAM) and cybercrime services. The operation, named Operation Alice, targeted a platform called 'Alice with Violence CP,' operated by a 35-year-old man based in China. The fraudulent sites lured approximately 10,000 users into making payments, totaling around 400,000 euros, for non-existent CSAM packages. The investigation began in mid-2021 and revealed that the operator managed a network of 287 servers, with a significant number located in Germany. Authorities have identified 440 clients from 23 countries and are currently investigating them. An international arrest warrant has been issued for the suspect, who is believed to have profited significantly from this scheme. The operation highlights the ongoing collaboration between international law enforcement agencies to combat cybercrime.

Key Points: • Operation Alice shut down over 373,000 fraudulent dark web sites advertising fake CSAM. • The operation identified 440 clients across 23 countries, with ongoing investigations into their activities. • The Chinese operator of the sites is wanted by authorities for profiting approximately 400,000 euros.

Timeline

2021-06-01
Investigation into 'Alice with Violence CP' begins.
2026-03-09
Operation Alice officially launched.
2026-03-19
Operation Alice concludes with the shutdown of 373,000 sites.
2026-03-20
Europol announces the results of Operation Alice.