Hansa Dark-web Marketplace Takedown is a threat campaign tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed May 21, 2026; most recent activity May 22, 2026.
On May 19-20, 2026, an international law enforcement operation, dubbed Operation Saffron, successfully dismantled First VPN, a virtual private network service heavily utilized by cybercriminals for ransomware, fraud,…