www.europol.europa.eu Operation Alice: Massive Dark Web Takedown of 373,000 Fraudulent Sites
Article Content
- •Operation Alice dismantled 373,000 fraudulent dark web sites run by one individual.
- •The operator scammed criminals by taking payments for illegal content that was never delivered.
- •440 customers have been identified, with investigations ongoing against over 100 of them.
Between March 9 and March 19, 2026, law enforcement from 23 countries dismantled a vast network of 373,000 dark web sites operated by a single individual. This operation, known as Operation Alice, was led by German authorities and supported by Europol. The operator, a 35-year-old man from China, ran these fraudulent platforms for five years, scamming criminals by taking Bitcoin payments for illegal content that was never delivered. Investigators identified 440 customers who attempted to purchase illicit goods, leading to ongoing investigations against over 100 of them. The operation began with a single flagged site in 2021 and expanded significantly over time. The automated nature of the operation allowed the individual to manage a staggering number of sites without traditional infrastructure. The operator is currently wanted internationally, with an arrest warrant issued.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Ransom Cartel and Substack in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…