Back

International Operation KRATOS 2 Dismantles Major Illegal Streaming Networks

Severity: Medium (Score: 48.9)

Sources: www.europol.europa.eu, www.uefa.com, Escudodigital, 2eu.brussels, www.laliga.com

Published: 2026-06-03 · Updated: 2026-06-04

Keywords: illegal, streaming, laliga, crime, groups, crackdown, takes

Severity indicators: pla, rat

Summary

Operation KRATOS 2, coordinated by Bulgaria and supported by Europol, led to the dismantling of nine organized crime groups involved in illegal streaming. Over seven months, authorities arrested 29 suspects and removed more than 27,000 URLs linked to unauthorized access to sports, films, and TV channels. The operation, which ran from September 2025 to April 2026, identified 86 additional suspects and involved 148 house searches across 13 countries. Investigators targeted the infrastructure of these networks, exposing users to risks such as malware and data theft. The operation also identified 4,370 domains and 18,331 IP addresses associated with piracy activities. Europol emphasized that these illegal services not only infringe on intellectual property rights but also finance criminal enterprises. Key Points: • 29 arrests made and nine organized crime groups dismantled during Operation KRATOS 2. • Over 27,000 illegal streaming URLs removed, exposing users to significant cybersecurity risks. • Collaboration with private sector partners helped identify thousands of domains and IP addresses linked to piracy.

Detailed Analysis

**Impact** The operation affected illegal streaming networks operating across 13 countries in Europe and the United States, dismantling nine organized crime groups and arresting 29 suspects. Over 27,000 illegal streaming URLs were removed, disrupting access to pirated live sports broadcasts, films, and premium TV channels reaching millions of users worldwide. The networks generated millions of euros in illicit revenue and exposed consumers to cybersecurity risks including malware infections, spyware, and data theft. The sectors impacted include audiovisual content providers, sports organizations, and digital media distributors. **Technical Details** The criminal groups used sophisticated online platforms and IPTV systems that separated customer-facing websites from servers hosting illegal content, distributing infrastructure across multiple jurisdictions to evade detection. Investigators targeted the entire criminal ecosystem, including management and technical operators, conducting 148 house searches and seizing servers, IPTV devices, and cryptocurrency assets. Over 4,000 piracy-related domains, 18,000+ IP addresses, and nearly 400,000 URLs were identified and flagged for removal. No specific malware, CVEs, or attack tools were detailed in the reports. **Recommended Response** Defenders should monitor and block identified piracy-related domains, IP addresses, and URLs as shared by law enforcement and private sector partners. Organizations in the audiovisual sector should maintain collaboration with anti-piracy coalitions and law enforcement to receive timely intelligence updates. Users should be warned about the cybersecurity risks of illegal streaming services, including potential malware and data theft. No specific patching or technical mitigations were provided in the available information.

Source articles (9)

  • Police dismantles 9 crime groups in illegal streaming crackdown — Bleepingcomputer · 2026-06-03
    European and international law enforcement agencies have dismantled nine organized crime groups and arrested 29 suspects in a major crackdown on illegal streaming operations. The seven-month "Operatio…
  • Laliga Takes Part On An Unprecedented Europol Operation To Successfully Neutralize A Record Number Of Illegal Streaming Platforms And Illegal Iptvs — www.laliga.com · 2026-06-03
    LALIGA has constantly demonstrated its commitment on the fight against audiovisual fraud and illegal content consumption through different initiatives and complaints. Now, after months of work between…
  • International crackdown on illegal streaming: 29 arrests and nine criminal networks dismantled — Escudodigital · 2026-06-03
    The seven-month KRATOS 2 operation, involving 13 countries, also led to the takedown of more than 27,000 illegal streaming links and the identification of 86 suspects. A major international law enforc…
  • Europol announces 29 arrests in an operation against illegal streaming networks — Informat.Ro · 2026-06-03
    An international operation against illegal streaming networks has led to 29 arrests, the dismantling of nine organized crime groups, and the removal of over 27,000 URLs used for unauthorized access to…
  • Europol Anunta 29 De Arestari Intr O Operatiune Impotriva Retelelor De Streaming Ilegal — 2eu.brussels · 2026-06-03
    O operațiune internațională coordonată de Bulgaria, cu sprijinul Europol, a dus la 29 de arestări, destructurarea a nouă grupuri de crimă organizată și eliminarea a peste 27.000 de URL-uri de streamin…
  • European authorities crack down on illegal streaming networks — Cyberscoop · 2026-06-03
    Authorities in Europe arrested 29 alleged cybercriminals and took down more than 27,000 illegal streaming URLs that pirated major sporting events, films and TV programming, Europol said Wednesday. The…
  • 29 Arrests, Nine Crime Groups Dismantled: Another Blow to Illegal Streaming — Securityaffairs.Co · 2026-06-04
    International Operation KRATOS led by Europol dismantled illegal streaming networks, leading to 29 arrests and nine crime groups taken down. An international law enforcement operation, codenamed Opera…
  • Operation KRATOS — www.uefa.com · 2026-06-03
  • 29 Arrested as International Crackdown Dismantles Nine Criminal Streaming Networks — www.europol.europa.eu · 2026-06-06

Timeline

  • 2025-09-01 — Operation KRATOS 2 launched: The operation began targeting illegal streaming networks across multiple jurisdictions.
  • 2026-04-30 — Operation KRATOS 2 concluded: The operation concluded with significant arrests and dismantling of criminal networks.
  • 2026-06-03 — Europol announces operation results: Europol reported the results of Operation KRATOS 2, highlighting the arrests and URL removals.

Related entities

  • Malware (Attack Type)
  • Kratos 2 (Campaign)
  • Kratos 2 Operation (Campaign)
  • Operation Kratos (Campaign)
  • Operation Kratos 2 (Campaign)
  • Operation Switch Off (Campaign)
  • Belgium (Country)
  • Bulgaria (Country)
  • Croatia (Country)
  • Egypt (Country)
  • France (Country)
  • Germany (Country)
  • Greece (Country)
  • Ireland (Country)
  • Italy (Country)
  • Latvia (Country)
  • Macedonia (Country)
  • Netherlands (Country)
  • Poland (Country)
  • Portugal (Country)
  • Romania (Country)
  • Spain (Country)
  • Sweden (Country)
  • Switzerland (Country)
  • United Kingdom (Country)
  • United States (Country)
  • Netflix (Company)
  • Spotify (Company)
Loading threat details...

Threat Not Found

The threat cluster you're looking for doesn't exist or has been removed.

Return to Feed