Microsoft Leads RedVDS Takedown: Shutting Down Cybercrime-as-a-Service in 2024
In June 2024, Microsoft, in collaboration with law enforcement agencies, successfully disrupted the notorious RedVDS cybercrime-as-a-service operation by seizing two of its primary domains. RedVDS had enabled a global network of cybercriminals to launch ransomware and data-theft attacks, facilitating millions of dollars in losses through their infrastructure. The takedown was part of an ongoing campaign targeting criminal online service providers that enable encrypted C2 traffic, lateral movement, and evasion of traditional network defenses. The operation demonstrated how threat actors are using such platforms to remain agile and scale attacks against diverse sectors worldwide. This takedown spotlights the increasing focus by law enforcement and cloud providers on dismantling illicit digital infrastructures. With cybercrime-as-a-service continuing to gain traction and lower the barrier for threat actors, addressing these platforms is pivotal to disrupting large-scale ransomware and data exfiltration campaigns.
Kill Chain
