Cybercrime infrastructure
Operation SIMCARTEL
An international action dismantled infrastructure used to provide fraudulent SIM services. Europol reported seven arrests, five seized servers, roughly 1,200 SIM boxes, and 40,000 active SIM cards.
Self-hosted media and documents
Operations archive
Original files from OperationArchive, organized into verified case pages and cross-checked against official or authoritative reporting.
Archive summary
DOJ cyber-enforcement feed
Browse all 1,189 →Official Justice Department press-release metadata, filtered for both a cyber topic and an enforcement action. These records are research leads; the curated operation pages below add media, documents, and source review.
- 2026-07-15 California Duo Charged with Operating Nationwide Darknet Drug Trafficking Operation, Laundering Cryptocurrency Proceeds
- 2026-07-09 Armenian National Extradited to the United States Pleads Guilty to Ransomware Extortion Conspiracy
- 2026-07-09 Florida Ransomware Negotiator Who Extorted and Attacked Multiple U.S. Victims Sentenced to Prison
- 2026-07-09 Land O’Lakes Ransomware Negotiator Who Extorted and Attacked Multiple U.S. Victims Sentenced to Prison
- 2026-07-06 Georgia Man and Florida Man Indicted for Trafficking Heroin on the Darknet
- 2026-07-01 Alleged Member of Criminal Cyber Hacking Group “Scattered Spider” Arrested in Finland and Extradited to the United States
Collections
Cybercrime prosecution
Thalha Jubair charges
U.S. charges were unsealed after a United Kingdom arrest. The complaint records allegations, not a conviction, and is preserved in its original public filing format.
Cybercrime prosecution
IntelBroker / Kai West charges
U.S. prosecutors announced charges against Kai West, alleged to have used the IntelBroker alias. The source folder also contains personal photographs and an unrelated 2018 NCA video; OpenSpy retains them as archive attachments without treating them as evidence in this case.
Dark-web marketplace
Archetyp / Operation Deep Sentinel
Authorities across six countries took down Archetyp, described by Europol as one of the longest-running and most prolific dark-web drug markets.
Cybercrime arrest
Reported Natohub arrest
Spanish authorities announced the arrest of a suspect tied to more than 40 alleged cyberattacks. The official release does not name the alias, so the Natohub association is reported rather than asserted as an official fact.
Cybercrime marketplaces
Operation Talent
An international operation disrupted the Cracked and Nulled cybercrime marketplaces alongside related payment and hosting services.
Dark-web marketplace
Sipulitie market seizure
Finnish Customs announced that it had shut down the Sipulitie Tor marketplace and seized its server contents.
Cybercrime infrastructure
Cryptex and UAPS raids
Russian authorities reported raids connected to Cryptex, UAPS, and associated payment services. Their statements should be read separately from the preceding U.S. action.
Cybercrime arrest
Tyler Buchanan arrest
Spanish authorities announced the arrest of an unnamed British suspect; a later U.S. case identified and charged Tyler Buchanan. The records are presented in that sequence.
Malware infrastructure disruption
Operation Endgame video archive
A self-hosted collection of the 15 season-labelled videos accompanying the continuing international campaign against malware droppers and ransomware-enabling infrastructure.
Cybercrime marketplace
Genesis Market / Operation Cookie Monster
An international action disrupted Genesis Market, which sold stolen credentials, browser cookies, and device fingerprints. Authorities reported 119 arrests worldwide.
Ransomware enforcement
REvil-related arrests in Russia
Russia’s FSB said it acted against alleged REvil members at the United States’ request. Numbers and seized-property claims remain attributed to Russian authorities.
Ransomware enforcement
Cl0p-related raids in Ukraine
Ukrainian police arrested six people suspected of links to Cl0p ransomware during Operation Cyclone.
Online child-safety enforcement
David Wilson investigation and sentencing
NCA footage documents the investigation and arrest of David Wilson, who was sentenced in 2021 for online sexual offences against children.
Online child-safety enforcement
Matthew Falder NCA investigation
NCA footage records surveillance, arrest, and questioning in the investigation of Matthew Falder, who later pleaded guilty and was sentenced.
Cybercrime arrest
Yevgeniy Nikulin arrest
Czech authorities arrested Yevgeniy Nikulin before U.S. charges concerning intrusions at LinkedIn, Dropbox, and Formspring were unsealed.
Cybercrime raid
Kim Dotcom / Megaupload raid
New Zealand Police executed search warrants and arrests connected to the U.S. Megaupload case.
Provenance and limitations
The source archive does not include a redistribution license. OpenSpy preserves the supplied files for research and documentary context, attributes the archive to Dark Web Informer, and links official sources on every collection page. A folder name or attachment alone is not treated as proof; known date errors and misfiled material are labelled.
Download the complete integrity manifest → · Read the source archive README →