{"article":{"annotation":{"article_id":"europol-sality-botnet-disruption-september-2026","available_at":"2026-10-07T03:14:10.416412Z","geography_revision":"ef6ee0010dda5fe7b240fd514749b43e214c57da73222d2e40ec83b276dd0977","id":"02c382991c2fee05072003ed58e237e4472ce57216ee1738992e55e1ecc7bd32","input_sha256":"5b0cbc5ee5462f064e332905042c895f50d01715e4282a4a3290582f9ab63f01","limitations":["Rule-derived subjects are candidates, not verified editorial labels or calibrated model probabilities.","Coverage is distinct from event location. Unknown country/city/coordinates remain absent; no automatic geocoding.","Article geometries keep their stated precision and methodology; reproducing them is not independent coordinate verification."],"method":"controlled-rules-v1","places":[],"rules_sha256":"d28c9c89703b56bd91fd887965d416d0115c2473d4bfbd3e558bcceafc3941dd","schema_version":1,"subjects":[{"concept_id":"medtop:20000086","confidence":null,"confidence_method":null,"evidence":[{"field":"en.title+en.summary","language":"en","note":"Subject suggested from the title or summary: botnet","source_urls":["https://www.europol.europa.eu/media-press/newsroom/news/global-public-private-operation-disrupts-sality-botnet-active-for-two-decades"]}],"method":"controlled-rules-v1","rule_id":"cyber-crime","status":"candidate"}],"taxonomy_revision":"1f2db31d811fca07e99b16d402c10e2cc2965c9df1c7b41d9be348b40a24e7fb","taxonomy_version":"IPTC Media Topics 2026-Q2"},"api_url":"https://newsverum.com/api/v1/articles/europol-sality-botnet-disruption-september-2026?lang=en","category":"security","content":{"key_points":[],"paragraphs":["Europol announced on 2 September 2026 a coordinated action led by US authorities with Bulgaria, Hungary and Romania. It said the Sality peer-to-peer botnet had been used for years to distribute malicious payloads and that more than 11 million unique IP addresses had been linked to its infrastructure.","At its peak, the botnet was believed to have given its operator access to as many as one million infected machines worldwide, according to Europol. The European Cybercrime Centre supported intelligence sharing and operational meetings; the reported IP-address total does not represent a count of infected devices."],"sections":[]},"corrections":[{"at":"2026-10-07T00:51:22+03:00","language":"en","text":"German and Portuguese editions and translations of the data and correction explanations have been added to this article."},{"at":"2026-10-07T05:57:35+03:00","language":"en","text":"Data classification added: each figure now carries a measure identifier with its unit, geography, frequency and type. No figure, unit or date changed."}],"country":null,"data":{"blocks":[{"description":{"ar":"حدث أمني أو إجراء مؤسسي أورده المصدر.","de":"Sicherheitsereignis oder institutionelle Maßnahme laut Quelle.","en":"Security event or institutional action reported by the source.","es":"Acontecimiento de seguridad o actuación institucional comunicada por la fuente.","fr":"Événement de sécurité ou action institutionnelle rapportée par la source.","pt":"Evento de segurança ou ação institucional informada pela fonte.","tr":"Kaynağın bildirdiği güvenlik olayı veya kurumsal işlem."},"id":"security-event","items":[{"date":"2026-08-31","description":{"ar":"استهدفت العملية التي قادتها السلطات الأمريكية بنية الشبكة بمشاركة بلغاريا والمجر ورومانيا. وقالت يوروبول إن أكثر من 11 مليون عنوان IP فريد ارتبط بالبنية التحتية.","de":"Die von den USA geführte Aktion richtete sich gemeinsam mit Bulgarien, Ungarn und Rumänien gegen die Botnet-Infrastruktur. Europol zufolge wurden mehr als 11 Millionen eindeutige IP-Adressen damit in Verbindung gebracht.","en":"The US-led action targeted the botnet infrastructure with Bulgaria, Hungary and Romania. Europol said more than 11 million unique IP addresses had been linked to the infrastructure.","es":"La acción dirigida por las autoridades estadounidenses apuntó a la infraestructura de la botnet con Bulgaria, Hungría y Rumanía. Europol indicó que se habían vinculado más de 11 millones de direcciones IP únicas a esa infraestructura.","fr":"L’action dirigée par les autorités américaines a visé l’infrastructure du botnet avec la Bulgarie, la Hongrie et la Roumanie. Europol indique que plus de 11 millions d’adresses IP uniques lui ont été associées.","pt":"A ação liderada pelos Estados Unidos teve como alvo a infraestrutura da botnet com Bulgária, Hungria e Romênia. A Europol disse que mais de 11 milhões de endereços IP únicos foram associados a essa infraestrutura.","tr":"ABD makamlarının öncülüğündeki işlem Bulgaristan, Macaristan ve Romanya’nın katılımıyla botnet altyapısını hedef aldı. Europol, 11 milyondan fazla benzersiz IP adresinin bu altyapıyla ilişkilendirildiğini bildirdi."},"label":{"ar":"عملية منسقة ضد شبكة سالتي","de":"Koordinierte Maßnahme gegen das Sality-Botnetz","en":"Coordinated action against the Sality botnet","es":"Operación coordinada contra la botnet Sality","fr":"Action coordonnée contre le botnet Sality","pt":"Ação coordenada contra a botnet Sality","tr":"Sality botnetine yönelik koordineli işlem"},"status":"occurred"}],"methodology":{"ar":"يلخص تاريخ الحدث ووصفه الإجراء الوارد في المصدر؛ ولم تُجرَ قياسات أو توقعات إضافية.","de":"Datum und Beschreibung fassen die von der Quelle gemeldete Maßnahme zusammen; es werden keine zusätzlichen Messungen oder Prognosen erstellt.","en":"The event date and description summarise the action reported by the source; no additional measurement or forecast is made.","es":"La fecha y la descripción resumen la actuación comunicada por la fuente; no se añade ninguna medición ni previsión.","fr":"La date et la description résument l’action rapportée par la source ; aucune mesure ni prévision supplémentaire n’est ajoutée.","pt":"A data e a descrição resumem a ação relatada pela fonte; nenhuma medição ou previsão adicional é feita.","tr":"Etkinlik tarihi ve açıklama kaynakta bildirilen eylemi özetler; ek ölçüm veya tahmin yapılmamıştır."},"sourceUrls":["https://www.europol.europa.eu/media-press/newsroom/news/global-public-private-operation-disrupts-sality-botnet-active-for-two-decades"],"title":{"ar":"تطور أمني","de":"Sicherheitsereignis","en":"Security development","es":"Hecho de seguridad","fr":"Événement de sécurité","pt":"Acontecimento de segurança","tr":"Güvenlik gelişmesi"},"type":"events","updatedAt":"2026-10-07T00:51:22+03:00"},{"description":{"ar":"القيمة الكمية الرئيسية الواردة في المصدر.","de":"Zentrale quantitative Angabe der Quelle.","en":"Key quantitative figure stated by the source.","es":"Dato cuantitativo principal comunicado por la fuente.","fr":"Principal chiffre quantitatif indiqué par la source.","pt":"Principal dado quantitativo informado pela fonte.","tr":"Kaynağın belirttiği temel nicel değer."},"id":"security-figures","items":[{"basis":"observed","label":{"ar":"عناوين IP فريدة مرتبطة بالبنية التحتية","de":"Mit der Infrastruktur verknüpfte eindeutige IP-Adressen","en":"Unique IP addresses linked to infrastructure","es":"Direcciones IP únicas vinculadas a la infraestructura","fr":"Adresses IP uniques associées à l’infrastructure","pt":"Endereços IP únicos associados à infraestrutura","tr":"Altyapıyla ilişkilendirilen benzersiz IP adresleri"},"measure":{"aggregation":"stock","frequency":"irregular","geography":"world","id":"sality-botnet-linked-ip-addresses","periodRole":"reference-period","unitCode":"count"},"period":"2026-08-31","unit":"count","value":11000000,"valueQualifier":"lower-bound"}],"methodology":{"ar":"نُقلت القيمة كما وردت في المصدر؛ ويبين الوصف إن كانت تقريبية أو حداً أدنى أو أعلى.","de":"Der Wert wird wie von der Quelle angegeben wiedergegeben; ein Zusatz kennzeichnet Näherungs- oder Grenzwerte.","en":"Value is reproduced as stated by the source; a qualifier marks an approximate or bounded figure.","es":"El valor se reproduce como lo comunica la fuente; el calificador indica si es aproximado o un límite.","fr":"La valeur est reprise telle qu’indiquée par la source ; un qualificatif signale une approximation ou une borne.","pt":"O valor é reproduzido conforme a fonte; uma qualificação indica valor aproximado ou limitado.","tr":"Değer kaynakta bildirildiği biçimde aktarılmıştır; niteleyici varsa yaklaşık veya sınır değerini gösterir."},"sourceUrls":["https://www.europol.europa.eu/media-press/newsroom/news/global-public-private-operation-disrupts-sality-botnet-active-for-two-decades"],"title":{"ar":"مقياس أورده المصدر","de":"Von der Quelle gemeldete Kennzahl","en":"Measure reported by the source","es":"Medida comunicada por la fuente","fr":"Mesure rapportée par la source","pt":"Medida informada pela fonte","tr":"Kaynağın bildirdiği ölçü"},"type":"metrics","updatedAt":"2026-10-07T00:51:22+03:00"}],"version":1},"data_downloads":[{"formats":{"csv":"https://newsverum.com/api/v1/articles/europol-sality-botnet-disruption-september-2026/data/security-event?lang=en&format=csv","json":"https://newsverum.com/api/v1/articles/europol-sality-botnet-disruption-september-2026/data/security-event?lang=en&format=json"},"id":"security-event"},{"formats":{"csv":"https://newsverum.com/api/v1/articles/europol-sality-botnet-disruption-september-2026/data/security-figures?lang=en&format=csv","json":"https://newsverum.com/api/v1/articles/europol-sality-botnet-disruption-september-2026/data/security-figures?lang=en&format=json"},"id":"security-figures"}],"data_types":["events","metrics"],"editorial_illustration":null,"event_id":"event-f2059359-bb7d-541d-9dc3-ae6ab612ba7d","event_period":"2026-08-31","event_period_basis":"event-or-reference-period","id":"europol-sality-botnet-disruption-september-2026","image":null,"importance":0.6,"language":"en","modified_at":"2026-10-07T05:57:35+03:00","publication_basis":"publication-record","published_at":"2026-10-06T08:59:00+00:00","reading_minutes":1,"region":"world","section_illustration":null,"slug":"europol-sality-botnet-disruption-september-2026","sources":[{"checkedAt":"2026-10-06","name":"Europol","publishedAt":"2026-09-02","url":"https://www.europol.europa.eu/media-press/newsroom/news/global-public-private-operation-disrupts-sality-botnet-active-for-two-decades"}],"summary":"Europol said an international action on 31 August targeted Sality botnet infrastructure linked to more than 11 million unique IP addresses.","text":"Europol said an international action on 31 August targeted Sality botnet infrastructure linked to more than 11 million unique IP addresses.\n\nEuropol announced on 2 September 2026 a coordinated action led by US authorities with Bulgaria, Hungary and Romania. It said the Sality peer-to-peer botnet had been used for years to distribute malicious payloads and that more than 11 million unique IP addresses had been linked to its infrastructure.\n\nAt its peak, the botnet was believed to have given its operator access to as many as one million infected machines worldwide, according to Europol. The European Cybercrime Centre supported intelligence sharing and operational meetings; the reported IP-address total does not represent a count of infected devices.\n\nGerman and Portuguese editions and translations of the data and correction explanations have been added to this article.\n\nData classification added: each figure now carries a measure identifier with its unit, geography, frequency and type. No figure, unit or date changed.","title":"Europol-backed operation targets Sality botnet infrastructure","topics":[],"translations":[{"api_url":"https://newsverum.com/api/v1/articles/europol-sality-botnet-disruption-september-2026?lang=tr","language":"tr","url":"https://newsverum.com/tr/news/europol-sality-botnet-disruption-september-2026"},{"api_url":"https://newsverum.com/api/v1/articles/europol-sality-botnet-disruption-september-2026?lang=en","language":"en","url":"https://newsverum.com/en/news/europol-sality-botnet-disruption-september-2026"},{"api_url":"https://newsverum.com/api/v1/articles/europol-sality-botnet-disruption-september-2026?lang=ar","language":"ar","url":"https://newsverum.com/ar/news/europol-sality-botnet-disruption-september-2026"},{"api_url":"https://newsverum.com/api/v1/articles/europol-sality-botnet-disruption-september-2026?lang=fr","language":"fr","url":"https://newsverum.com/fr/news/europol-sality-botnet-disruption-september-2026"},{"api_url":"https://newsverum.com/api/v1/articles/europol-sality-botnet-disruption-september-2026?lang=es","language":"es","url":"https://newsverum.com/es/news/europol-sality-botnet-disruption-september-2026"},{"api_url":"https://newsverum.com/api/v1/articles/europol-sality-botnet-disruption-september-2026?lang=de","language":"de","url":"https://newsverum.com/de/news/europol-sality-botnet-disruption-september-2026"},{"api_url":"https://newsverum.com/api/v1/articles/europol-sality-botnet-disruption-september-2026?lang=pt","language":"pt","url":"https://newsverum.com/pt/news/europol-sality-botnet-disruption-september-2026"}],"url":"https://newsverum.com/en/news/europol-sality-botnet-disruption-september-2026"},"version":"1"}