DISRUPTIONS In the News

Sharing threat information among peers benefits all parties through awareness, informed decision making, and increased resilience.  The NCFTA sharing model also includes responsible sharing with and support of law enforcement to enable authorities to disrupt cyber-criminal actors and groups wherever they may be. This is a big reason why we do what we do; to impose a consequence on those who leverage the internet to criminally benefit themselves or others.

Included below are press releases pertaining to successful law enforcement investigations and other newsworthy items in which the NCFTA or NCFTA community played a supporting role.

Congratulations to those law enforcement agencies, case agents, and prosecutors who have invested countless hours while seeking justice for exploited victims. Scroll down to read the stories.

August 26, 2026

Global Cybercrime Syndicate Disrupted by AFP and FBI

Two Western Australian men have been charged for their roles in the cybercriminal group, TeamPCP, that allegedly infiltrated organizations worldwide by hiding malicious code inside trusted open-source software. Australian Federal Police and the FBI estimate the campaign may have compromised more than 1,000 organizations globally, exposed over 500,000 credentials, and resulted in the theft of at least 300 gigabytes of data, with remediation costs reaching into the hundreds of millions of dollars.

Continue Reading
August 25, 2026

Chainalysis CSAM Operation at NCFTA Identifies 7,000+ Suspect Accounts Across 125 Countries

Operation Lighthouse, a groundbreaking global initiative led by Chainalysis and hosted at the NCFTA New York has transformed cryptocurrency intelligence into a powerful weapon against child sexual abuse material (CSAM) networks. During an intensive multi-day operational sprint, investigators from around the world collaborated to analyze more than 29,000 cryptocurrency addresses tied to over 100 CSAM platforms and distribution networks, generating 14,300 investigative leads and identifying more than 7,700 suspect accounts, including 16 registered sex offenders. Suspects were identified in 125 countries, including 150+ individuals from just two private sector partners alone.

Continue Reading
July 24, 2026

HSI Strikes Major Blow Against Transnational Telecom Fraud

Operation Signal Break was a nationwide crackdown that dismantled illegal SIM box networks used to power scam calls, phishing texts and other fraud schemes targeting Americans. Between June 22 and July 10 2026, specialized "SIM Box Surge Teams" swept across six states, seizing key criminal infrastructure and building on a broader campaign that has already led to more than 116 search warrants, the seizure of 500,000 SIM cards and 1,900 SIM boxes, and the disruption of 68 SIM farms nationwide.

Continue Reading
July 20, 2026

Illegal World Cup Streaming Empire Dismantled in International Copyright Crackdown

In a major digital piracy sweep, the U.S. Department of Justice announced the seizure of more than 1,000 websites allegedly used to illegally stream FIFA World Cup matches, disrupting a vast network that authorities say violated copyright laws while potentially exposing users to malware and data theft. Carried out with assistance from FIFA, major media companies, and federal investigators, the operation, dubbed “Operation Offsides,” targeted domains broadcasting live World Cup games without authorization. Officials say the enforcement action not only protects intellectual property rights but also safeguards consumers from the hidden risks often associated with illicit streaming platforms.

Continue Reading
July 14, 2026

U.S. Targets Alleged Safe Haven for Cybercriminals Behind Ransomware and Phishing Campaigns

Three Russian nationals and two St. Petersburg companies are accused of providing “bulletproof hosting” services designed to shield cybercriminals from detection while enabling attacks that caused over $62 Million in losses. The cybercrime operation helped fuel ransomware attacks, malware campaigns, phishing schemes, and other cyber intrusions targeting critical organizations across the United States and beyond.

Continue Reading
June 24, 2026

Member of the cult-like Zizian's Group Charged in Parents’ 2022 Killings

More than three years after the Pennsylvania double homicide, authorities have charged Michelle Zajko with the murders of her parents. The trail of evidence includes doorbell camera footage, cellphone data, ballistics analysis, and ammunition linked to her property. The case reportedly has ties to the mysterious “Zizian” group, a fringe network connected to multiple deaths across several states. Prosecutors allege Zajko orchestrated the killings with unidentified accomplices, while she maintains her innocence.

Continue Reading
June 11, 2026

Operators of AudiA6 Charged with Laundering $389 Million in Cryptocurrency

Ruslan Igorevich Tkachuk and Alexander Vladimirovich Ledenev, of the Republic of Georgia, face up to 20 years in prison for operating AudiA6, a cryptocurrency laundering service accused of processing more than $389 million linked to cybercrime, ransomware, darknet markets, and other illicit activity. The coordinated global law enforcement operation targeted the group's infrastructure across multiple countries, resulting in property searches, server seizures, frozen cryptocurrency assets, and the shutdown of websites and Telegram accounts tied to the network.

Continue Reading
April 25, 2026

NCFTA Supports PA Attorney General's Office in Anti-Human Trafficking Operation During 2026 NFL Draft

Over 130 commercial, illicit advertisements with indicators of human trafficking were identified during the 2026 NFL Draft in Pittsburgh. The operation was led by the Pennsylvania OAG Human Trafficking Section in Allegheny County. Successful contact was made with 7 potential victims, 4 of whom disclosed prior involvement in human trafficking situations, with 6 referrals to the PA OAG Victim Services Administrator for follow-up and support.

April 24, 2026

Singapore Authorities Arrest Three in $3m BEC Scheme

Three teenagers conspired with a Malaysian crime syndicate to defraud a U.S. victim out of $2.89m. The trio duped the victim via a business e-mail compromise to remit the funds to shell company accounts they established in Singapore. The three were arrested after attempting to withdraw the funds. With the help of US law enforcement in Singapore and through the NCFTA, $2.56m has so far been recovered.

Continue Reading
April 15, 2026

Laptop Farm Operators Sentenced for Facilitating DPRK Remote IT Worker Scheme

Two U.S nationals were each sentenced to 9 and 7 1/2 years in prison respectively for their roles in facilitating North Korean remote IT workers posing as U.S. Residents to obtain work at more than 100 U.S. companies. At least 80 stolen identities were used to generate over $5M in illicit revenue for the DPRK government.

Continue Reading