Key Points

• International authorities successfully dismantle SocksEscort network, confiscating 34 domains and 23 servers globally.
• Criminal operation compromised more than 369,000 routers across 163 nations worldwide.
• Law enforcement freezes $3.5 million in cryptocurrency linked to the illicit proxy service.
• AVRecon malware served as the backbone for SocksEscort, facilitating fraud, ransomware distribution, and DDoS campaigns.
• International collaboration demonstrates effective cross-border cooperation in combating sophisticated cybercrime.

A sophisticated international cybercrime operation has been successfully dismantled following coordinated action by Europol and United States law enforcement agencies. The operation targeted SocksEscort, an illicit proxy service that weaponized more than 369,000 compromised devices spanning 163 nations. Authorities confiscated multiple domains and servers while freezing $3.5 million in cryptocurrency assets, effectively terminating this extensive IP cloaking scheme.

The enforcement action resulted in the disconnection of compromised modems, rendering the criminal service inoperable. Affected nations will receive notification regarding infected routers within their jurisdictions to enable follow-up actions. This collaborative takedown represents a milestone achievement in global efforts to combat sophisticated cybercrime infrastructure.

The SocksEscort platform enabled threat actors to conceal their geographical locations while executing fraud schemes, ransomware campaigns, and various digital offenses. Operating as a commercial service, it provided access to over 35,000 proxy connections to paying customers seeking anonymous criminal operations. Law enforcement officials indicate this IP cloaking infrastructure enabled extensive attack campaigns and significant financial crimes.

Worldwide Criminal Infrastructure Exposed

Investigators documented SocksEscort operations spanning 163 countries, with infections affecting residential and small business networking equipment. The malicious infrastructure redirected internet communications through compromised devices, effectively obscuring the true origin points of criminal traffic. Thousands of victims in the United States and United Kingdom were identified, demonstrating the operation’s extensive international footprint.

Threat actors exploited this network to infiltrate banking systems and cryptocurrency platforms, while also submitting fraudulent financial claims. One documented U.S. victim suffered approximately $1 million in cryptocurrency losses attributed to attacks routed through this infrastructure. The criminal enterprise reportedly commenced operations in 2020 and experienced rapid expansion.

By February 2026, SocksEscort maintained access to 8,000 compromised routers, with 2,500 located within U.S. borders. Black Lotus Labs conducted extensive tracking of the botnet, identifying the AVRecon malware as the operational foundation. This IP cloaking infrastructure represented a substantial threat to global digital security.

Coordinated Enforcement Action and Continuing Probes

Europol and the Department of Justice spearheaded a synchronized enforcement operation, confiscating 34 domain names and 23 servers distributed across seven countries. U.S. authorities successfully froze $3.5 million in cryptocurrency directly associated with SocksEscort financial transactions. Compromised devices were systematically disconnected, eliminating the operational IP cloaking infrastructure.

Affected nations are receiving official notifications to facilitate continued investigations and potential prosecution efforts. The operation showcases the power of international coordination in neutralizing sophisticated cybercrime infrastructure. The disruption of this router-based IP cloaking operation will substantially hinder similar criminal activities moving forward.

SocksEscort specifically exploited small-office and home-office networking devices, providing criminals with capabilities to execute precision fraud operations. Law enforcement confirmed the proxy infrastructure facilitated ransomware deployment, distributed denial-of-service attacks, and illegal content distribution. The termination of SocksEscort eliminates one of the most extensive IP cloaking operations documented in recent years.

US equities keep climbing, but JPMorgan data show retail equity buying down about 30%, shifting crypto’s driver mix toward macro funds just as Iran, oil and inflation risks linger.

US equities are grinding higher on the surface, but retail is quietly stepping off the gas — a mix that keeps the risk‑on narrative alive while thinning out the marginal buyer underneath crypto.

U.S. indices extend gains

Major U.S. stock indices opened higher, with the Nasdaq 100 and Russell 2000 each up more than 1%, while the Dow Jones Industrial Average added about 0.7% in early trading. The move extends a broader pattern of dip‑buying and resilience across U.S. equities, even as macro headlines around Iran, oil and inflation continue to inject bouts of volatility. Tech and small caps leading the advance reinforces the idea that investors are still willing to lean into higher‑beta risk, a backdrop that has historically correlated with strong flows into Bitcoin and large‑cap crypto.

What matters here for crypto is not just the level of indices, but the regime: higher equities, narrower credit spreads and contained volatility indexes tend to support appetite for leveraged trades in BTC and ETH. As long as this regime persists, sharp equity pullbacks are more likely to be seen by macro funds as tactical buying opportunities rather than the start of a broader de‑risking, which tempers the odds of a synchronized dump across stocks and digital assets.

JPMorgan flags retail fatigue

Underneath the headline gains, though, JPMorgan data shows U.S. retail investors are starting to ease off. In a note cited by the Wall Street Journal and MarketWatch, the bank reports that retail net buying of U.S. equities has slowed by roughly 30% versus prior weeks, breaking a several‑month pattern of persistent dip‑buying. Weekly flows into equity ETFs have dropped by about 22% over the period, with investors cutting both ETF contributions and single‑stock purchases.

JPMorgan’s team describes these trends as signs of “persistent” or “ongoing” fatigue, rather than a single‑day wobble, with Monday marking the largest net‑selling day for individual stocks in about a month. That shift matters because the same cohort that has aggressively bought U.S. tech and thematic ETFs has also been a marginal buyer of crypto‑adjacent stocks and, to a lesser extent, spot Bitcoin products.

Implications for crypto positioning

For crypto traders, the combination of strong index prints and softer retail flows means the marginal driver of risk is skewing more institutional and macro rather than retail FOMO. If equities keep drifting higher while retail accelerates its slowdown, Bitcoin and Ethereum may increasingly trade off futures flows, systematic strategies and macro funds’ views on inflation and the Fed, rather than Reddit‑style chase behavior.

The main risk to watch is a scenario where retail fatigue deepens just as a macro shock hits — for example, hotter‑than‑expected inflation or a renewed spike in oil linked to Iran — removing the “buy the dip” bid that has repeatedly stabilized both stocks and crypto over the past quarters. Until then, the tape remains risk‑on, but the composition of buyers is quietly shifting in a way crypto desks cannot ignore.

TLDR

• Yield-bearing stablecoins grew 15 times faster than the broader stablecoin market over six months.
• Circle’s USYC and Paxos’ USDG led gains with market cap increases of 198% and 169%.
• The total value of yield-bearing stablecoins reached $22.7 billion after an 11% monthly rise.
• Maple’s Syrup USDC offered the highest weekly yield at 4.54% APY, according to Messari.
• US lawmakers remain divided as the Senate delays action on the crypto market structure bill.

Yield-bearing stablecoins expanded rapidly over the past six months, according to Messari. The research firm reported that these tokens grew 15 times faster than the broader stablecoin market. However, US lawmakers remain divided over how federal law should treat crypto-linked yield.

Messari published its findings on Thursday and outlined sharp market cap increases across major tokens. The report showed that yield-bearing products attracted rising demand while the overall stablecoin market grew modestly. Meanwhile, lawmakers continue to debate provisions in pending digital asset legislation.

USYC and USDG Lead Growth in Stablecoins Segment

Circle’s USYC recorded a 198% increase in market capitalization over six months. Paxos’ Global Dollar (USDG) posted a 169% rise during the same period. Messari stated that these gains far outpaced the 9% growth in the broader stablecoin market.

The firm said the largest yield-bearing stablecoins now function like money market funds or bank deposits. “The winners don’t do payments,” Messari wrote in the report. It added that leading issuers focus on single-asset exposure rather than payment use cases.

Yield-bearing stablecoins began outpacing overall supply growth in mid-October 2025. The trend pointed to a stronger demand for blockchain-based dollar products offering yield. Stablewatch data showed the sector reached $22.7 billion after an 11% rise in 30 days.

That figure doubled the $11 billion recorded in May 2025. Still, yield-bearing tokens account for 7.4% of the $303 billion stablecoin market. The share stood at 4.5% in May last year.

USDD, USDY, and Top APYs Draw Policy Scrutiny

Tron DAO-linked Decentralized USD (USDD) rose 114% in market value over six months. Ondo Finance’s Ondo US Dollar Yield (USDY) increased 91% during the same timeframe. DefiLlama ranked Sky’s sUSDS, Ethena’s sUSDe, and Maple’s Syrup USDC among the largest by value.

Maple’s Syrup USDC offered a 4.54% annual percentage yield this week. Maple USDT followed with a 4.17% APY, while Sky Lending’s sUSDS posted 3.75%. Ethena’s USDe delivered a 3.49% APY, according to Messari data.

Lawmakers continue to debate how to regulate yield-bearing stablecoins under federal law. Senate Majority Leader John Thune said the chamber will not advance the market structure bill before April. Banking groups argue that yield features could shift deposits away from traditional banks.

The Senate Banking Committee delayed its markup in mid-January as bipartisan talks continued. President Donald Trump criticized the delay and urged faster action on the bill. The House passed the Digital Asset Market Structure Clarity Act on July 17, 2025.

The GENIUS Act became law on July 18, 2025, and it restricts interest on payment stablecoins. However, the law allows third-party platforms to offer reward programs tied to holdings. Debate over yield provisions continues as the Senate reviews the legislation.

Bitcoin BTC$71,859.13 is adding to overnight gains in early U.S. trading on Friday, continuing to show strong relative price action after many months of underperformance to assets like stocks and precious metals.

Trading at $73,500, bitcoin is higher by nearly 5% over the past 24 hours, with most of those gains coming after U.S. Treasury Secretary Scott Bessent on Thursday evening said the Trump administration is taking concrete steps to try and cap surging oil prices.

Bitcoin is now higher by about 11% since the Iran war broke out, outperforming broad U.S. stock indices and gold, both of which have lost ground since the bombs began dropping about two weeks ago.

WTI oil on Friday is trading at $94.50 per barrel, down from a high of nearly $98 on Thursday. U.S. stocks are posting gains of about 0.5%.

Oil raises stagflationary risk

The recent spike in oil prices is putting direct pressure on household budgets and, if sustained, could weaken consumer spending and slow economic growth, according to Olu Sonola, head of US economics at Fitch Ratings.

“Yes, the broader economy is still expected to grow at trend, but that forecast increasingly looks fragile as downside risks accumulate. … The Fed can shrug off pockets of weakening growth, but resurgent inflation severely limits its room to maneuver, leaving policy potentially stranded for months,” he wrote in a note.

Relief bounce

After a period of some of the worst sentiment in bitcoin’s history, it’s perhaps not too surprising that there’s been some modest gains of late.

Funding positioning of perpetual futures traders has been negative for the longest period since late 2022, K33 Research analyst Vetle Lunde noted. This means traders who are shorting bitcoin are paying longs to keep their trades open, resulting in a negative funding rate. Late 2022, of course, coincided with the aftermath of the FTX crash when BTC traded around $16,000 versus $69,000 one year earlier.

The 30-day average funding rate has now been negative for 14 consecutive days, the longest since December 2022, Lunde pointed out. These negative streaks coincided with local price bottoms over the past seven years, he added.

In the meantime, bitcoin open interest in perpetual and dated futures has risen 9% over the past 24 hours to around 700,000 BTC, the highest level since Feb. 6. Add it all up, and that creates the conditions for a short squeeze.

Friday gain

The day isn’t over yet, but this would be the first Friday gain since the Middle East conflict began on Feb. 27. That might suggest a less volatile weekend for crypto, which has gotten in the habit of declining on Saturdays and Sundays in recent weeks.

March is also shaping up to be a turning point for bitcoin. The asset is up about 8% so far this month. Again, it’s early, but a March advance would break BTC’s five-month losing streak.

BlackRock’s iShares Staked Ethereum Trust ETF (ETHB) saw a strong debut on the Nasdaq on Thursday, March 12, drawing $43.48 million in net inflows and recording $16.54 million in trading volume on its first day, according to data from SoSoValue.

The only U.S. spot ETH ETF to outperform ETHB in net inflows on the day was Fidelity’s FETH, which pulled in just over $52 million, and saw $83.91 million in trading volume yesterday.

BlackRock’s spot-only Ethereum ETF, ETHA, saw $18.68 million in net inflows on the same day.

Bloomberg ETF analyst James Seyffart called the debut “very, very solid for a day 1 ETF launch” in an X post on Thursday.

As The Defiant reported yesterday, ETHB is BlackRock’s third crypto ETF and its first to incorporate staking, combining spot ETH exposure with monthly staking income. Coinbase Prime handles ETH custody, per the firm’s press release.

The product carries a 0.25% sponsor fee, waived down to 0.12% for the first year on up to $2.5 billion in assets.

According to the fund’s prospectus as of March 11, filed with the U.S. Securities and Exchange Commission (SEC), BlackRock intends to stake between 70% and 95% of the trust’s ETH holdings “under normal market circumstances.”

BlackRock also said in its prospectus that it will stake ETH either via its ETH custodian, aka Coinbase, with one or more staking services providers, which could be Coinbase affiliates, or “other approved third-party validators.”

As The Defiant previously reported, ETHB is not the first staked ETH product in the U.S., but BlackRock’s market dominance across both Ethereum and Bitcoin ETFs in the U.S. makes ETHB’s entry a significant moment for the staked ETH market.

The launch follows key regulatory milestones that cleared the path for yield-bearing crypto ETFs. An SEC division issued staff guidance last May stating that staking is not a securities transaction — a staff-level position, not a formal rule — and the SEC formally acknowledged BlackRock’s staking filing last July.

The spot price of ETH rallied about 6% over the past 24 hours, reaching almost $2,200. ETH is now up on the weekly and monthly timeframes, 7% and 12% respectively.

This article was written with the assistance of AI workflows. All our stories are curated, edited and fact-checked by a human.

Editor’s note: This editorial previews the joint effort by AMC Robotics and HIVE to push AI-driven robotics compute infrastructure. The partners say the collaboration will use HIVE’s GPU AI Cloud resources to back AMC’s Kyro platform as it scales from lab testing toward real-world deployment, with demonstrations of autonomous navigation and heat detection highlighted in Tokyo. Beyond immediate compute needs, the companies are exploring broader cooperation in AI optimization, data processing, and scalable infrastructure to support future product initiatives.

As we continue to expand our AI-driven robotics solutions, access to reliable and scalable infrastructure is increasingly important.

Key points

• AMC Robotics and HIVE are collaborating to advance AI-driven robotics compute infrastructure.
• AMC will use HIVE’s GPU AI Cloud compute resources to support development, testing, and deployment of Kyro and related robotics solutions.
• Kyro demonstrated autonomous navigation, abnormal heat detection, and remote operation at the Tokyo Security Show 2026.
• The collaboration may expand to AI optimization, data processing, and infrastructure scalability with future arrangements subject to mutual terms.

Why this matters

The partnership signals growing demand for scalable AI compute as robotics move toward real-time edge applications. By combining Kyro’s autonomous platform with HIVE’s GPU AI Cloud, AMC and HIVE aim to improve performance, flexibility, and scalability, accelerating innovation at the AI-robotics frontier and enabling real-time video processing and navigation in challenging environments.

What to watch next

• Further collaboration across AI optimization, data processing, and infrastructure scalability as opportunities emerge.
• Progress of Kyro from lab demonstrations to real-world deployment with scalable compute resources.
• Expansion of HIVE’s BUZZ GPU AI Cloud infrastructure to support robotics workloads globally.

Disclosure: The content below is a press release provided by the company/PR representative. It is published for informational purposes.

AMC ROBOTICS AND HIVE ANNOUNCE COLLABORATION TO ADVANCE AI-DRIVEN ROBOTICS COMPUTE INFRASTRUCTURE

12 Mar 2026

AMC Robotics and HIVE Announce Collaboration to Advance AI-Driven Robotics Compute InfrastructureThis news release constitutes a “designated news release” for the purposes of the Company’s prospectus supplement dated November 25, 2025 to its short form base shelf prospectus dated October 31, 2025. San Antonio, TX, March 13, 2026 — AMC Robotics Corporation (Nasdaq: AMCI) (“AMC Robotics” or the “Company”), an AI-driven robotics solutions provider, and HIVE Digital Technologies (“HIVE”) (TSX.V: HIVE) (Nasdaq: HIVE) (FSE: YO0) (BVC: HIVECO), a global leader in sustainable digital infrastructure and AI compute, today jointly announced a strategic collaboration focused on advancing next-generation AI-driven robotics applications and scalable infrastructure capabilities.

Through this collaboration, AMC Robotics has begun utilizing HIVE’s GPU AI compute infrastructure and related services to support the Company’s expanding development, testing, and deployment needs. In parallel, the two companies are actively exploring broader areas of cooperation, including potential collaboration across AI optimization, data processing, and infrastructure scalability to support future product initiatives.

AMC Robotics recently featured its AI-powered quadruped robot Kyro™ at the Tokyo Security Show 2026, as an active demonstration of autonomous security technology. The robot serves as a mobile AI edge computing platform, capable of operating independently in complex environments and supporting real-time monitoring and inspection. During the exhibition, Kyro™ performed live demonstrations of autonomous navigation, abnormal heat detection, and remote operation, showcasing how robotics can support security and inspection tasks in challenging environments.

A video demonstration of AMC Robotics’ Kyro™ platform in action is available at https://amc-media.amcx.ai/rebotdog.mp4. Additional information on AMC’s robotic solutions can be found at https://amcx.ai/solutions/robotic-dogs/.

As AMC Robotics continues advancing AI-driven robotics applications, particularly for real-time video processing and navigation, access to scalable GPU computing infrastructure becomes increasingly critical. HIVE has been expanding its GPU AI Cloud infrastructure globally through its BUZZ HPC subsidiary, servicing growing enterprise demand across AI training, inference, and now robotics workloads, where it will provide AMC Robotics with the compute resources needed to support its growing development and deployment activities.

The collaboration reflects a shared vision between AMC Robotics and HIVE to accelerate innovation at the intersection of artificial intelligence, robotics, and intelligent infrastructure. By leveraging HIVE’s technical capabilities and AMC Robotics’ application-driven robotics platform, the parties aim to enhance performance efficiency, development flexibility, and long-term scalability.

“As we continue to expand our AI-driven robotics solutions, access to reliable and scalable infrastructure is increasingly important,” said Sean Da, CEO of AMC Robotics. “Our collaboration with HIVE supports our current operational needs while also opening the door to potential deeper collaboration as we look ahead.”

Frank Holmes, Co-Founder & Executive Chairman of HIVE, stated, “We are seeing the next turn of the AI industrial revolution with the advent of robotics, for security, for logistics, and many new novel applications in manufacturing. This is accelerating as the autonomy, stability, and accuracy of AI-enabled robots evolve. These machines will take on the dangerous, the dull, and the impossible, and the companies building the infrastructure behind them will define the next decade. We are seeing massive investment from the most valuable companies in the world into AI robotics (notably Tesla’s Optimus robots), and the HIVE and AMC Robotics strategic collaboration positions our firms right in the center of these growing markets.”

Aydin Kilic, President & CEO of HIVE, said, “We believe robotics applications may represent a growing area of demand for AI compute infrastructure. As our GPU AI Cloud platform expands globally to service growing AI demand and broad industrial use cases, we see meaningful opportunities to work with AMC Robotics as it advances intelligent robotics applications across a growing range of use cases. As innovators in our respective fields, HIVE’s BUZZ GPU AI Cloud will provide scalable and high-performance compute for AMC Robotics’ ramp from lab to real-world deployment at scale.”

The companies emphasized that the collaboration is expected to evolve over time as HIVE scales its global infrastructure and AMC Robotics moves toward production deployment. Any future arrangements would be subject to further evaluation and mutually agreed terms.

About AMC Robotics Corporation

AMC Robotics (Nasdaq: AMCI) is an AI-driven robotics company focused on developing intelligent, scalable hardware and software solutions. The Company’s quadruped robotic platform, Kyro™, enables industries to automate inspection, security, and operational tasks through autonomous mobility and AI-powered perception. For more information, please visit www.amcx.ai.

About HIVE Digital Technologies Ltd.

Founded in 2017, HIVE Digital Technologies Ltd. is the first publicly listed company to mine digital assets powered by green energy. Today, HIVE builds and operates next-generation Tier-I and Tier-III data centers across Canada, Sweden, and Paraguay, serving both Bitcoin and high-performance computing clients. HIVE’s twin-turbo engine infrastructure-driven by hashrate services and GPU-accelerated AI computing-delivers scalable, environmentally responsible solutions for the digital economy.

For more information, visit hivedigitaltech.com, or connect with us on:

X: https://x.com/HIVEDigitalTech
YouTube: https://www.youtube.com/@HIVEDigitalTech
Instagram: https://www.instagram.com/hivedigitaltechnologies/
LinkedIn: https://linkedin.com/company/hiveblockchain

On Behalf of HIVE Digital Technologies Ltd.

“Frank Holmes”
Executive Chairman

For further information, please contact:

Nathan Fast, Director of Marketing and Branding
Frank Holmes, Executive Chairman
Aydin Kilic, President & CEO

Tel: (604) 664-1078

Craig Mychajluk, Managing Director – Investor Relations, Alliance Advisors IR

E: AMCRoboticsIR@allianceadvisors.com

Neither the TSX Venture Exchange nor its Regulation Services Provider (as that term is defined in policies of the TSX Venture Exchange) accepts responsibility for the adequacy or accuracy of this news release.

Cautionary Note Regarding Forward Looking Statements

This press release may contain statements that constitute “forward-looking statements” as defined in the Private Securities Litigation Reform Act of 1995. Forward-looking statements include information concerning the Company’s possible or assumed future results of operations, business strategies, debt levels, competitive position, industry environment, potential growth opportunities, and the effects of regulation. These forward-looking statements are based on the Company’s management’s current expectations, projections, and beliefs, as well as a number of assumptions concerning future events. When used in this communication, the words “estimates,” “projected,” “expects,” “anticipates,” “forecasts,” “plans,” “intends,” “believes,” “seeks,” “may,” “will,” “should,” “future,” “propose,” and variations of these words or similar expressions (or the negative versions of such words or expressions) are intended to identify forward-looking statements.

These forward-looking statements are not guarantees of future performance, conditions, or results, and involve a number of known and unknown risks, uncertainties, assumptions, and other important factors, many of which are outside of the Company’s control, that could cause actual results to differ materially from the results discussed in the forward-looking statements. These risks, uncertainties, assumptions, and other important factors include, but are not limited to: (a) challenges in opening operations in new jurisdictions, including but not limited to compliance with local ordinances, obtaining any necessary permits and regulatory oversight; (b) the ability to recognize the anticipated benefits of the new operations; (c) the outcome of any legal proceedings that may be instituted against the Company; (d) the ability to continue to meet the applicable stock exchange listing standards; (e) the effect of the Company’s recently completed business combination with AlphaVest Acquisition Corp (“AlphaVest”) on the Company’s business relationships, performance, and business generally and the risk that such transaction further disrupts current plans and operations of the Company or its subsidiaries; (f) the ability to recognize the anticipated benefits of the transaction with AlphaVest, which may be affected by, among other things, competition, the ability of the Company to grow and manage growth profitably, maintain relationships with customers and suppliers and retain its management and key employees; (g) changes in applicable laws or regulations, including legal or regulatory developments (including, without limitation, accounting considerations); (h) the possibility that AMC Robotics may be adversely affected by other economic, business, and/or competitive factors; (i) AMC Robotics’ estimates of expenses and profitability; and (j) other risks and uncertainties indicated under “Risk Factors” contained in the definitive proxy statement/prospectus for the transaction with AlphaVest, and other documents filed or to be filed with the SEC by AMC Robotics. Copies are available on the SEC’s website, www.sec.gov. You are cautioned not to place undue reliance upon any forward-looking statements, which speak only as of the date made.

The Company assumes no obligation and, except as required by law, does not intend to update or revise these forward-looking statements, whether as a result of new information, future events, or otherwise. The Company gives no assurance that it will achieve its expectations.

US and European authorities said Thursday they had disrupted SocksEscort, a malicious proxy service used by cybercriminals to hide their identities while carrying out fraud, including cryptocurrency account takeovers.

The DOJ said the service compromised at least 369,000 routers and other internet-connected devices in 163 countries, giving cybercriminals control over proxies that hid their true IP addresses.

The platform reportedly enabled crimes, including bank fraud and cryptocurrency account takeovers, since 2020. In one case cited by prosecutors, a victim in New York lost roughly $1 million in cryptocurrency.

Authorities said they seized 34 domains, disrupted about two dozen servers across seven countries and froze about $3.5 million in cryptocurrency linked to the operation.

The network received at least $5.7 million from users

To access the proxy service, customers used a payment platform that allowed them to purchase it anonymously with cryptocurrency, according to a statement by Europol.

Investigators estimate that SocksEscort received at least 5 million euros ($5.7 million) from its users.

“Proxy services like ‘SocksEscort’ provide criminals with the digital cover they need to launch attacks, distribute illegal content and evade detection,” Europol Executive Director Catherine De Bolle said.

“Operations like this show that when investigators connect the dots internationally, the infrastructure behind cybercrime can be exposed and shut down,” she added.

The operation involved agencies from multiple countries

The takedown was part of a coordinated international effort that included law enforcement agencies from Austria, France, the Netherlands, Germany, Hungary, Romania and the US.

The FBI Sacramento Field Office, the Department of Defense Office of Inspector General’s Defense Criminal Investigative Service, and IRS Criminal Investigation Oakland Field Office were among the US agencies involved. Europol and Eurojust provided investigative and operational support for the cross-border operation.

Related: Sweden probes reported leak of e-government platform source code

The DOJ also acknowledged the assistance of Black Lotus Labs, the threat intelligence unit of the US telecom company Lumen Technologies, and the nonprofit organization Shadowserver Foundation, which provided technical intelligence during the investigation.

According to The Hacker News, SocksEscort relied on malware known as AVrecon, details of which were publicly documented by Black Lotus Labs in July 2023.

Magazine: All 21 million Bitcoin is at risk from quantum computers