Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes
Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes
23-year-old botnet down
www.theregister.com
September 1, 2026 at 11:57 PM
Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes
Authorities and CrowdStrike disrupted the Sality botnet after 23 years. More than 11 million unique IP addresses were linked to it during its lifetime.
Listen/Read: hackread.com/sality-botne...
#CyberSecurity #Botnet #Sality #CyberCrime #DDoS
Listen/Read: hackread.com/sality-botne...
#CyberSecurity #Botnet #Sality #CyberCrime #DDoS
Sality Botnet Linked to 11 Million IPs Disrupted After 23 Years
US and European authorities disrupted the long-running Sality botnet, using P2P sinkholing to cut infected Windows systems off from its operator.
hackread.com
September 4, 2026 at 5:11 PM
Authorities and CrowdStrike disrupted the Sality botnet after 23 years. More than 11 million unique IP addresses were linked to it during its lifetime.
Listen/Read: hackread.com/sality-botne...
#CyberSecurity #Botnet #Sality #CyberCrime #DDoS
Listen/Read: hackread.com/sality-botne...
#CyberSecurity #Botnet #Sality #CyberCrime #DDoS
International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to disrupt and take down the peer-to-peer (P2P) botnet.
Sality botnet infrastructure dismantled in joint global takedown
International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to disrupt and take down the peer-to-peer (P2P) botnet.
www.bleepingcomputer.com
September 2, 2026 at 8:01 AM
International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to disrupt and take down the peer-to-peer (P2P) botnet.
Sality botnet, 23 years old, finally disrupted
Law enforcement, CrowdStrike, and Shadowserver disrupted Sality, a 23-year-old P2P botnet that infected 15,000+ machines and stole crypto for eight years.
Two decades is quite a lifespan for a botnet before someone decided to finally sinkhole it.
Law enforcement, CrowdStrike, and Shadowserver disrupted Sality, a 23-year-old P2P botnet that infected 15,000+ machines and stole crypto for eight years.
Two decades is quite a lifespan for a botnet before someone decided to finally sinkhole it.
September 2, 2026 at 8:29 AM
Sality botnet, 23 years old, finally disrupted
Law enforcement, CrowdStrike, and Shadowserver disrupted Sality, a 23-year-old P2P botnet that infected 15,000+ machines and stole crypto for eight years.
Two decades is quite a lifespan for a botnet before someone decided to finally sinkhole it.
Law enforcement, CrowdStrike, and Shadowserver disrupted Sality, a 23-year-old P2P botnet that infected 15,000+ machines and stole crypto for eight years.
Two decades is quite a lifespan for a botnet before someone decided to finally sinkhole it.
Investigators have disabled Sality, a botnet linked to 11 million IP addresses. Europol says the effort targeted one of the hardest systems to dismantle.
Years-long Europol-backed effort dismantles global botnet controlling 1m devices
Years-long Europol-backed effort dismantles global botnet controlling 1m devices
www.brusselstimes.com
September 2, 2026 at 8:08 PM
Investigators have disabled Sality, a botnet linked to 11 million IP addresses. Europol says the effort targeted one of the hardest systems to dismantle.
Sality, a Russia-based botnet that infected more than 11 million devices during a 23-year run of operations, was dismantled Monday by law enforcement, CrowdStrike and the Shadowserver Foundation.
Read more by @mattkapko.com: cyberscoop.com/sality-botne...
Read more by @mattkapko.com: cyberscoop.com/sality-botne...
September 3, 2026 at 3:32 AM
Sality, a Russia-based botnet that infected more than 11 million devices during a 23-year run of operations, was dismantled Monday by law enforcement, CrowdStrike and the Shadowserver Foundation.
Read more by @mattkapko.com: cyberscoop.com/sality-botne...
Read more by @mattkapko.com: cyberscoop.com/sality-botne...
New: Sality, a peer-to-peer botnet which has been around in some iteration for *23 years,* is being dismantled.
www.reuters.com/legal/govern...
www.reuters.com/legal/govern...
Russian cybercrime operation being dismantled after two decades, US officials and CrowdStrike say
A two-decade-old Russian hacking operation dubbed "Sality" is being dismantled, U.S. law enforcement officials and cybersecurity company CrowdStrike announced on Tuesday.
www.reuters.com
September 1, 2026 at 11:58 PM
New: Sality, a peer-to-peer botnet which has been around in some iteration for *23 years,* is being dismantled.
www.reuters.com/legal/govern...
www.reuters.com/legal/govern...
U.S. and European authorities disrupted the long-running botnet Sality, turning its peer-to-peer architecture against itself therecord.media/sality-botne...
Sality, one of the longest-running botnets, finally gets disrupted
U.S. and European authorities disrupted the long-running botnet Sality, turning the malware’s peer-to-peer architecture against itself to cut thousands of infected computers off from operators.
therecord.media
September 2, 2026 at 1:01 PM
U.S. and European authorities disrupted the long-running botnet Sality, turning its peer-to-peer architecture against itself therecord.media/sality-botne...
Here's @crowdstrike.com's blog post explaining how the takedown happened.
www.crowdstrike.com/en-us/blog/i...
www.crowdstrike.com/en-us/blog/i...
Inside the Sality Botnet Disruption Operation | CrowdStrike
CrowdStrike collaborated with international law enforcement and industry partners to execute a coordinated disruption of the Sality peer-to-peer botnet.
www.crowdstrike.com
September 2, 2026 at 12:09 AM
Here's @crowdstrike.com's blog post explaining how the takedown happened.
www.crowdstrike.com/en-us/blog/i...
www.crowdstrike.com/en-us/blog/i...
🌐 More than 11 million infected IP addresses linked to the Sality botnet.
After more than two decades of activity, an international operation supported by Europol has disrupted the resilient peer-to-peer infrastructure.
🤝 🇺🇸 🇧🇬 🇭🇺 🇷🇴 + private-sector partners
🔗 Read more: https://ow.ly/Tfx450ZI9C1
After more than two decades of activity, an international operation supported by Europol has disrupted the resilient peer-to-peer infrastructure.
🤝 🇺🇸 🇧🇬 🇭🇺 🇷🇴 + private-sector partners
🔗 Read more: https://ow.ly/Tfx450ZI9C1
September 2, 2026 at 8:40 AM
🌐 More than 11 million infected IP addresses linked to the Sality botnet.
After more than two decades of activity, an international operation supported by Europol has disrupted the resilient peer-to-peer infrastructure.
🤝 🇺🇸 🇧🇬 🇭🇺 🇷🇴 + private-sector partners
🔗 Read more: https://ow.ly/Tfx450ZI9C1
After more than two decades of activity, an international operation supported by Europol has disrupted the resilient peer-to-peer infrastructure.
🤝 🇺🇸 🇧🇬 🇭🇺 🇷🇴 + private-sector partners
🔗 Read more: https://ow.ly/Tfx450ZI9C1
*A botnet that lasted for 23 years. Are there even older botnets than that? Are they multigenerational heirlooms of some kind?
https://www.crowdstrike.com/en-us/blog/inside-sality-botnet-disruption-operation/
https://www.crowdstrike.com/en-us/blog/inside-sality-botnet-disruption-operation/
Inside the Sality Botnet Disruption Operation | CrowdStrike
CrowdStrike collaborated with international law enforcement and industry partners to execute a coordinated disruption of the Sality peer-to-peer botnet.
www.crowdstrike.com
September 3, 2026 at 3:45 AM
*A botnet that lasted for 23 years. Are there even older botnets than that? Are they multigenerational heirlooms of some kind?
https://www.crowdstrike.com/en-us/blog/inside-sality-botnet-disruption-operation/
https://www.crowdstrike.com/en-us/blog/inside-sality-botnet-disruption-operation/
Sality Botnet Dismantled After Eight Years of Stealing Bitcoin and Ethereum
Sality Botnet Dismantled After Eight Years of Stealing Bitcoin and Ethereum
CrowdStrike and the DOJ isolated more than 15,000 infected machines in a malware takedown spanning four countries.
decrypt.co
September 2, 2026 at 11:34 AM
Sality Botnet Dismantled After Eight Years of Stealing Bitcoin and Ethereum
So do we think that someone who operated a botnet for more than 20 years (a life’s work) will just walk away after a takedown, or will they just rebuild the botnet like they built it before?
www.crowdstrike.com/en-us/blog/i...
www.crowdstrike.com/en-us/blog/i...
Inside the Sality Botnet Disruption Operation | CrowdStrike
CrowdStrike collaborated with international law enforcement and industry partners to execute a coordinated disruption of the Sality peer-to-peer botnet.
www.crowdstrike.com
September 1, 2026 at 10:44 PM
So do we think that someone who operated a botnet for more than 20 years (a life’s work) will just walk away after a takedown, or will they just rebuild the botnet like they built it before?
www.crowdstrike.com/en-us/blog/i...
www.crowdstrike.com/en-us/blog/i...
Kolluk Kuvvetleri ve CrowdStrike İş Birliğiyle Sality Botnet Çökertildi: 23 Yıllık Tehdide Darbe
Kolluk Kuvvetleri ve CrowdStrike İş Birliğiyle Sality Botnet Çökertildi: 23 Yıllık Tehdide Darbe
Siber güvenlik dünyasında tarihi bir operasyona imza atıldı. Küresel çapta faaliyet gösteren kolluk kuvvetleri ve siber güvenlik devi CrowdStrike, 23 yılı aş…
teknovizor.com
September 2, 2026 at 1:25 AM
Kolluk Kuvvetleri ve CrowdStrike İş Birliğiyle Sality Botnet Çökertildi: 23 Yıllık Tehdide Darbe
Cops and CrowdStrike poisoned the Sality network and diverted it to sinkholes. #Cops #CrowdStrike #Sality #Sinkholes https://www.theregister.com/cyber-crime/2026/09/02/cops-crowdstrike-disrupt-sality-botnet-by-poisoning-the-network-and-diverting-into-sinkholes/5293795
Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes
23-year-old botnet down
www.theregister.com
September 2, 2026 at 7:15 PM
Cops and CrowdStrike poisoned the Sality network and diverted it to sinkholes. #Cops #CrowdStrike #Sality #Sinkholes https://www.theregister.com/cyber-crime/2026/09/02/cops-crowdstrike-disrupt-sality-botnet-by-poisoning-the-network-and-diverting-into-sinkholes/5293795
The Europol‑led operation successfully disrupted the Sality botnet, which has been active for 20 years. #Europol #Sality #botnet https://malware.news/t/global-public-private-operation-disrupts-sality-botnet-active-for-two-decades/125256
Global public-private operation disrupts Sality botnet active for two decades - Malware News - Malware Analysis, News and Indicators
An international operation supported by Europol has disrupted the Sality peer-to-peer (P2P) botnet, a long-running criminal infrastructure used to distribute malicious payloads to thousands of infected computers worldwid…
malware.news
September 3, 2026 at 7:37 AM
The Europol‑led operation successfully disrupted the Sality botnet, which has been active for 20 years. #Europol #Sality #botnet https://malware.news/t/global-public-private-operation-disrupts-sality-botnet-active-for-two-decades/125256
Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sin…
www.theregister.com/cyber-crime/...
#Cybersecurity #ThreatIntel #Vulnerability
www.theregister.com/cyber-crime/...
#Cybersecurity #ThreatIntel #Vulnerability
Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes
23-year-old botnet down
www.theregister.com
September 2, 2026 at 12:31 AM
Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sin…
www.theregister.com/cyber-crime/...
#Cybersecurity #ThreatIntel #Vulnerability
www.theregister.com/cyber-crime/...
#Cybersecurity #ThreatIntel #Vulnerability
Russian Crypto-Stealing Botnet Sality Shut Down After Two-Decade Run
Sep 03 2026 07:15 UTC
#sality-botnet #crypto-theft #clipboard-hijacking #crowdstrike #department-of-justice #eggjagger #bitcoin #ethereum #malware #takedown
Sep 03 2026 07:15 UTC
#sality-botnet #crypto-theft #clipboard-hijacking #crowdstrike #department-of-justice #eggjagger #bitcoin #ethereum #malware #takedown
September 3, 2026 at 10:21 AM
Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes www.theregister.com/cyber-crime/...
https://www.theregister.com/cyber-crime/2026/09/02/cops-crowdstrike-disrupt-sality-botnet-by-poisoning-the-network-and-diverting-into-sinkholes/5293795
www.theregister.com
September 13, 2026 at 7:12 AM
Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes www.theregister.com/cyber-crime/...
Active for over two decades!
Sality botnet infrastructure dismantled in joint global takedown
International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to disrupt and take down the peer-to-peer (P2P) botnet.
www.bleepingcomputer.com
September 2, 2026 at 3:37 PM
Active for over two decades!
Global sinkhole operation ends Sality botnet’s 23-year run
🔗 Read more: www.helpnetsecurity.com/2026/09/02/s...
#Botnet #LawEnforcement #Cybersecurity
@crowdstrike.com @shadowserver.bsky.social
🔗 Read more: www.helpnetsecurity.com/2026/09/02/s...
#Botnet #LawEnforcement #Cybersecurity
@crowdstrike.com @shadowserver.bsky.social
Global sinkhole operation ends Sality botnet’s 23-year run - Help Net Security
CrowdStrike and law enforcement led a disruption of Sality, a 23-year-old botnet that infected over 15,000 machines to steal cryptocurrency.
www.helpnetsecurity.com
September 2, 2026 at 9:03 AM
Global sinkhole operation ends Sality botnet’s 23-year run
🔗 Read more: www.helpnetsecurity.com/2026/09/02/s...
#Botnet #LawEnforcement #Cybersecurity
@crowdstrike.com @shadowserver.bsky.social
🔗 Read more: www.helpnetsecurity.com/2026/09/02/s...
#Botnet #LawEnforcement #Cybersecurity
@crowdstrike.com @shadowserver.bsky.social
-NVIDIA buys HuggingFace
-Firefox 155 is out with more AI
-CISA and G7 call for PQC action
-Dark web service sells 153m+ drivers licenses
-Authorities take down Sality botnet
-Russian charged for hacking freelancers
-Gambling Goblin targets Brazil
-New Phantom Deal group
-AI campaigns target LATAM
-Firefox 155 is out with more AI
-CISA and G7 call for PQC action
-Dark web service sells 153m+ drivers licenses
-Authorities take down Sality botnet
-Russian charged for hacking freelancers
-Gambling Goblin targets Brazil
-New Phantom Deal group
-AI campaigns target LATAM
September 4, 2026 at 8:10 AM
-NVIDIA buys HuggingFace
-Firefox 155 is out with more AI
-CISA and G7 call for PQC action
-Dark web service sells 153m+ drivers licenses
-Authorities take down Sality botnet
-Russian charged for hacking freelancers
-Gambling Goblin targets Brazil
-New Phantom Deal group
-AI campaigns target LATAM
-Firefox 155 is out with more AI
-CISA and G7 call for PQC action
-Dark web service sells 153m+ drivers licenses
-Authorities take down Sality botnet
-Russian charged for hacking freelancers
-Gambling Goblin targets Brazil
-New Phantom Deal group
-AI campaigns target LATAM
Sality, one of the longest-running botnets, finally gets disrupted
therecord.media/sality-botne...
therecord.media/sality-botne...
Sality, one of the longest-running botnets, finally gets disrupted
U.S. and European authorities disrupted the long-running botnet Sality, turning the malware’s peer-to-peer architecture against itself to cut thousands of infected computers off from operators.
therecord.media
September 3, 2026 at 11:49 AM
Sality, one of the longest-running botnets, finally gets disrupted
therecord.media/sality-botne...
therecord.media/sality-botne...
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Sality as part of a coordinated law enforcement operation.
The effo…
#hackernews #news
The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Sality as part of a coordinated law enforcement operation.
The effo…
#hackernews #news
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Sality as part of a coordinated law enforcement operation.
The effort was undertaken on August 31, 2026, by authorities from the U.S., Bulgaria, Hungary, and Romania, in collaboration with private industry partners CrowdStrike and the Shadowserver Foundation. To that
thehackernews.com
September 3, 2026 at 3:11 AM
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Sality as part of a coordinated law enforcement operation.
The effo…
#hackernews #news
The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Sality as part of a coordinated law enforcement operation.
The effo…
#hackernews #news
Sality-Botnetz nach mehr als 20 Jahren durch Sinkhole-Aktion gestoppt - Ein Peer-to-Peer-Netzwerk aus infizierten Rechnern, das seit dem Jahr 2003 bestand, ist nicht mehr unter der Kontrolle seines Betreibers.
www.all-about-security.de/sality-botne...
#malware #botnet #botnetz
www.all-about-security.de/sality-botne...
#malware #botnet #botnetz
Sality-Botnetz nach 23 Jahren zerschlagen: Die Details
Nach 23 Jahren ist das Sality-Botnetz nicht mehr aktiv. Lesen Sie, wie internationale Ermittler dieses Netzwerk zerschlagen haben.
www.all-about-security.de
September 2, 2026 at 4:52 AM
Sality-Botnetz nach mehr als 20 Jahren durch Sinkhole-Aktion gestoppt - Ein Peer-to-Peer-Netzwerk aus infizierten Rechnern, das seit dem Jahr 2003 bestand, ist nicht mehr unter der Kontrolle seines Betreibers.
www.all-about-security.de/sality-botne...
#malware #botnet #botnetz
www.all-about-security.de/sality-botne...
#malware #botnet #botnetz