DISRUPTIONS In the News

Sharing threat information among peers benefits all parties through awareness, informed decision making, and increased resilience.  The NCFTA sharing model also includes responsible sharing with and support of law enforcement to enable authorities to disrupt cyber-criminal actors and groups wherever they may be. This is a big reason why we do what we do; to impose a consequence on those who leverage the internet to criminally benefit themselves or others.

Included below are press releases pertaining to successful law enforcement investigations and other newsworthy items in which the NCFTA or NCFTA community played a supporting role.

Congratulations to those law enforcement agencies, case agents, and prosecutors who have invested countless hours while seeking justice for exploited victims. Scroll down to read the stories.

July 20, 2026

Illegal World Cup Streaming Empire Dismantled in International Copyright Crackdown

In a major digital piracy sweep, the U.S. Department of Justice announced the seizure of more than 1,000 websites allegedly used to illegally stream FIFA World Cup matches, disrupting a vast network that authorities say violated copyright laws while potentially exposing users to malware and data theft. Carried out with assistance from FIFA, major media companies, and federal investigators, the operation, dubbed “Operation Offsides,” targeted domains broadcasting live World Cup games without authorization. Officials say the enforcement action not only protects intellectual property rights but also safeguards consumers from the hidden risks often associated with illicit streaming platforms.

Continue Reading
July 14, 2026

U.S. Targets Alleged Safe Haven for Cybercriminals Behind Ransomware and Phishing Campaigns

Three Russian nationals and two St. Petersburg companies are accused of providing “bulletproof hosting” services designed to shield cybercriminals from detection while enabling attacks that caused over $62 Million in losses. The cybercrime operation helped fuel ransomware attacks, malware campaigns, phishing schemes, and other cyber intrusions targeting critical organizations across the United States and beyond.

Continue Reading
June 24, 2026

Member of the cult-like Zizian's Group Charged in Parents’ 2022 Killings

More than three years after the Pennsylvania double homicide, authorities have charged Michelle Zajko with the murders of her parents. The trail of evidence includes doorbell camera footage, cellphone data, ballistics analysis, and ammunition linked to her property. The case reportedly has ties to the mysterious “Zizian” group, a fringe network connected to multiple deaths across several states. Prosecutors allege Zajko orchestrated the killings with unidentified accomplices, while she maintains her innocence.

Continue Reading
June 11, 2026

Operators of AudiA6 Charged with Laundering $389 Million in Cryptocurrency

Ruslan Igorevich Tkachuk and Alexander Vladimirovich Ledenev, of the Republic of Georgia, face up to 20 years in prison for operating AudiA6, a cryptocurrency laundering service accused of processing more than $389 million linked to cybercrime, ransomware, darknet markets, and other illicit activity. The coordinated global law enforcement operation targeted the group's infrastructure across multiple countries, resulting in property searches, server seizures, frozen cryptocurrency assets, and the shutdown of websites and Telegram accounts tied to the network.

Continue Reading
April 25, 2026

NCFTA Supports PA Attorney General's Office in Anti-Human Trafficking Operation During 2026 NFL Draft

Over 130 commercial, illicit advertisements with indicators of human trafficking were identified during the 2026 NFL Draft in Pittsburgh. The operation was led by the Pennsylvania OAG Human Trafficking Section in Allegheny County. Successful contact was made with 7 potential victims, 4 of whom disclosed prior involvement in human trafficking situations, with 6 referrals to the PA OAG Victim Services Administrator for follow-up and support.

April 24, 2026

Singapore Authorities Arrest Three in $3m BEC Scheme

Three teenagers conspired with a Malaysian crime syndicate to defraud a U.S. victim out of $2.89m. The trio duped the victim via a business e-mail compromise to remit the funds to shell company accounts they established in Singapore. The three were arrested after attempting to withdraw the funds. With the help of US law enforcement in Singapore and through the NCFTA, $2.56m has so far been recovered.

Continue Reading
April 15, 2026

Laptop Farm Operators Sentenced for Facilitating DPRK Remote IT Worker Scheme

Two U.S nationals were each sentenced to 9 and 7 1/2 years in prison respectively for their roles in facilitating North Korean remote IT workers posing as U.S. Residents to obtain work at more than 100 U.S. companies. At least 80 stolen identities were used to generate over $5M in illicit revenue for the DPRK government.

Continue Reading
March 26, 2026

Behind the Vape Counters: Fairfax Police Uncover Drug and Cash Scheme

Fairfax County, VA police have targeted over a dozen local vape shops in a sweeping investigation into illegal drug sales and money laundering. The extensive operation highlights a coordinated crackdown on illicit activities within these retail locations.

Continue Reading
March 4, 2026

LeakBase Hacker Forum Dismantled by Global Law Enforcement Operation

On March 3 and 4, law enforcement in 14 countries including the United States took synchronized actions against LeakBase and its users in a coordinated effort hosted by Europol in The Hague. LeakBase forum has over 142,000 members and maintained an enormous archive of hacked databases, including hundreds of millions of account credentials. The forum, including all criminal account information, posts, private messages and logs have been seized by law enforcement.

Continue Reading
February 26, 2026

Chilean National Charged with Financial Fraud Extradited to U.S.

Alex Rodrigo Valenzuela Monje, aka “VAL4K,” 24, of Chile was charged with trafficking tens of thousands of stolen credit card numbers and information. From at least May 2021 to August 2023, Valenzuela Monje operated an illegal online card shop, selling dumps of over 25,000 unauthorized access devices through Telegram channels.

Continue Reading