International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to disrupt and take down the peer-to-peer (P2P) botnet.

CrowdStrike and the DOJ isolated more than 15,000 infected machines in a malware takedown spanning four countries.

An international operation supported by Europol has disrupted the Sality peer-to-peer (P2P) botnet, a long-running criminal infrastructure used to distribute malicious payloads to thousands of infected computers worldwid…

International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to disrupt and take down the peer-to-peer (P2P) botnet.

The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Sality as part of a coordinated law enforcement operation. The effort was undertaken on August 31, 2026, by authorities from the U.S., Bulgaria, Hungary, and Romania, in collaboration with private industry partners CrowdStrike and the Shadowserver Foundation. To that

Nach 23 Jahren ist das Sality-Botnetz nicht mehr aktiv. Lesen Sie, wie internationale Ermittler dieses Netzwerk zerschlagen haben.

Russia-based Sality watched for copied bitcoin and Ethereum addresses and quietly replaced them with the attacker’s. CrowdStrike and law enforcement have now isolated more than 15,000 infected machines.

Authorities sinkholed Sality's P2P botnet and seized linked domains, cutting off new payloads while existing malware remains active.

The Sality botnet silently swapped copied wallet addresses for eight years. Authorities cut off more than 15,000 infected machines this week.

Groups Conversations All groups and messages Sign in Technical - Malware Conversations     Peer Pressure: Inside the Sality Botnet Disruption Operation 0 views Eyal Estrin unread, 12:10 AM (7 minutes ago)    to https://www.crowdstrike.com/en-us/blog/inside-sality-botnet-disruption-operation/ Eyal Estrin Author | Cloud Architect | AWS • Azure • GCP Insights Social: @eyalestrin Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com Reply all Reply to author Forward

The Department of Justice has confirmed a coordinated international takedown of the Sality botnet, a peer-to-peer malware network that has plagued victims worldwide since 2003. The operation spanned …

Sality botnet hijacked BTC and ETH clipboard addresses for 8 years across 15,000 machines worldwide

International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to disrupt and take down the peer-to-peer (P2P) botnet.

The operators behind the Sality botnet and malware used a “clipjacking tool“ to replace wallet addresses with ones they controlled, enabling the theft of thousands of dollars in crypto.

Russia-based Sality watched for copied bitcoin and Ethereum addresses and quietly replaced them with the attacker’s. CrowdStrike and law enforcement have now isolated more than 15,000 infected machines.

US law enforcement and international partners disrupted the Sality botnet, a Malware network active since 2003 Sality operators used a […]

International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to disrupt and take down the peer-to-peer (P2P) botnet. [...]

Some malware dies quickly. Some malware gets patched. Some malware survives long enough to become part of Internet history. Sality survived for more than two...