Massive Cyber Strike: 373,000 Dark Web Domains Shut Down in Global Operation
A significant global operation has resulted in the shutdown of over 373,000 dark web sites, marking a crucial victory in the fight against cybercrime. This initiative, spearheaded by German authorities and supported by Europol, targeted a platform known as “Alice with Violence CP,” which had been under investigation since 2021 for facilitating the distribution of child sexual abuse material and offering cybercrime services.
Operation Alice: A Coalition of 23 Countries
From March 9 to 19, 2026, a coalition of 23 countries collaborated in what has been dubbed Operation Alice. Initially focused on the platform’s operator, this international effort led to the identification of 440 clients involved in the illicit activities. The operation underscores the importance of international cooperation in combating cybercrime, allowing law enforcement agencies to share intelligence and resources effectively.
Key Outcomes of the Operation
As of the latest reports, the results of Operation Alice are as follows:
- One operator identified as the mastermind behind the dark web platform.
- 440 clients identified across various countries.
- More than 373,000 dark web sites taken offline.
- 105 servers seized in the operation.
- Multiple electronic devices, including computers and mobile phones, confiscated.
These outcomes highlight the scale of the operation and the extensive network of cybercriminal activities that were dismantled.
The Web of Fraudulent Sites
The investigation revealed that a single individual was responsible for operating more than 373,000 .onion domains on the dark web. These domains are specifically designed to obscure the identity and location of both the sites and their visitors. Throughout the investigation, it was found that the suspect was advertising child sexual abuse material on over 90,000 of these domains.
Potential buyers were lured into purchasing packages of illicit content after providing an email address and making payments in Bitcoin. Prices for these packages ranged from 17 to 215 euros, with promised data volumes varying from a few gigabytes to several terabytes. However, these sites were fraudulent, with no actual content delivered to the buyers.
Additionally, the platform promoted various cybercrime services, such as the sale of credit card data and access to foreign systems, further exploiting unsuspecting clients.
The Operator: A Key Target
The investigation also focused on the platform’s operator, a 35-year-old man residing in the People’s Republic of China. Authorities estimate that he profited over 345,000 euros from approximately 10,000 clients worldwide who attempted to purchase the advertised material. At the height of his operations, he managed a network of up to 287 servers, with 105 located in Germany. An international arrest warrant has been issued for him, reflecting the serious nature of his crimes.
Interestingly, clients who paid for child abuse material became suspects themselves, even if they never received the content. Investigators view individuals seeking such material as potential high-value targets for intelligence gathering by global law enforcement.
During the investigation, authorities acted swiftly whenever they identified children at risk. For instance, in August 2023, Bavarian police conducted a search at the home of a 31-year-old father who had attempted to purchase a 70 GB package of content for 20 euros. The individual was subsequently convicted.
The Role of Europol
Europol played a pivotal role in facilitating the exchange of information, providing analytical support, and coordinating the international response to the operation. The agency was instrumental in tracing cryptocurrency payments, which are often used in illicit online transactions. Countries involved in the operation included Spain, Germany, the United States, the United Kingdom, Ukraine, Mexico, Canada, and Australia.
This operation not only highlights the ongoing challenges posed by cybercrime but also emphasizes the effectiveness of international collaboration in addressing these threats. The dismantling of such a vast network of dark web sites serves as a reminder of the importance of vigilance and cooperation among law enforcement agencies worldwide.
According to publicly available www.escudodigital.com reporting, the implications of this operation extend beyond immediate arrests and seizures. It raises awareness about the pervasive nature of cybercrime and the necessity for ongoing efforts to combat it.
Follow the latest cybersecurity developments, threat intelligence and breaking updates from across the Middle East.
