[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-CEN6GfUPGF3dS3ny0XufQqtogiFtup35rdKraQ1uPE":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":55},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"ad3e76ac-da20-4b58-a98d-e236203fd038","Police arrest 354 suspects in dark web cybercrime crackdown","police-arrest-354-suspects-in-dark-web-cybercrime-crackdown-e539d9","Authorities arrested 354 suspects in a joint international operation targeting vendors and buyers on the Archetyp, Nemesis, Tor2Door, Bohemia, and Kingdom dark web marketplaces. [...]","Operation TorNado, a joint international law enforcement action involving 14 countries, has resulted in the arrest of 354 suspects involved in dark web marketplaces. The operation, which ran from May 2025 to October 2026, also led to the seizure of over €210 million ($232 million) in cash and cryptocurrency, along with significant quantities of drugs and firearms. This action follows several similar global crackdowns targeting dark web criminal activities.","Police arrest 354 suspects in global dark web cybercrime crackdown.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fpolice-arrest-354-vendors-buyers-in-global-cybercrime-crackdown\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F15\u002FArrest.jpg","2026-11-13T08:34:20+00:00","2026-11-13T09:00:04.565905+00:00",7,[17,20,23,26,28,30],{"name":18,"type":19},"Operation TorNado","campaign",{"name":21,"type":22},"Europol","vendor",{"name":24,"type":25},"SIENA","product",{"name":27,"type":19},"JCODE",{"name":29,"type":19},"DisrupTor",{"name":31,"type":19},"Dark Huntor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":32,"icon":34,"name":35,"slug":36},null,"Breaches","breaches",[38,40,45],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,24],{"controls":53,"vendors":54},[],[],{"slug":56,"title":57,"body":58,"framework_refs":59,"framework_notes":64},"global-dark-web-crackdown-nets-354-arrests-and-210m-in-assets","Global Dark Web Crackdown Nets 354 Arrests and €210M in Assets","Operation TorNado demonstrates that sustained, coordinated international law enforcement monitoring of dark web marketplaces can dismantle large-scale criminal networks. The operation succeeded by tracking illicit financial flows, including cryptocurrency transactions, and sharing intelligence across 14 countries over an extended period. This matters for organizations because it highlights that dark web marketplaces remain active venues for trading stolen credentials, corporate data, and ransomware services that directly threaten businesses. The seizure of cryptocurrency underscores that blockchain transactions, while pseudonymous, leave traceable evidence when investigated with the right tools and legal frameworks.",[60,61,62,63],"NIST CSF 2.0 ID.RA: Risk Assessment","CIS Control 17: Incident Response Management (v8)","NIST SP 800-53 SI-5: Security Alerts, Advisories, and Directives","NIS2 Article 21(2)(b)",{"NIS2 Article 21(2)(b)":65,"NIST CSF 2.0 ID.RA: Risk Assessment":66,"CIS Control 17: Incident Response Management (v8)":67,"NIST SP 800-53 SI-5: Security Alerts, Advisories, and Directives":68},"NIS2 requires organizations to have incident handling capabilities, including cooperation with authorities—precisely the kind of cross-border coordination that made Operation TorNado effective.","Continuously assessing threats from dark web marketplaces—where stolen data and criminal services are traded—is exactly what this category requires to identify risks to organizational assets.","Operation TorNado's success relied on coordinated incident response across nations; organizations should similarly maintain structured response plans that include engaging law enforcement when cybercrime is detected.","This control requires organizations to receive and act on threat intelligence from external sources, which would include law enforcement advisories about dark web marketplaces selling stolen corporate data."]