In a sweeping international law enforcement effort, over 373,000 dark web sites have been shut down in an operation dubbed “Operation Alice.” The crackdown, led by German authorities and backed by Europol, targeted a network involved in extensive cybercrime activities, including child sexual abuse material (CSAM) and fraudulent cybercrime-as-a-service (CaaS) offerings.

The operation, initiated on March 9, 2026, involved coordinated efforts from 23 countries, leading to significant outcomes, including the identification of a main perpetrator based in the People’s Republic of China. This individual was found to be operating a network of more than 373,000 fraudulent websites under the guise of various onion domains designed to anonymize user activity.

The crackdown has not only led to the shutdown of these websites but also the seizure of 105 servers and numerous electronic devices. Authorities have cracked down on 440 customers globally who engaged with the illicit services offered by the network. These individuals are now under investigation, with some already facing legal actions due to their involvement in purchasing CSAM.

Europol has played a crucial role in the operation by facilitating the exchange of information and coordination among the participating countries. They have also been instrumental in tracking down cryptocurrency payments used in the transactions for these illegal services. Catherine De Bolle, Europol’s Executive Director, emphasized the commitment of the international law enforcement community to protect children, support victims, and hold perpetrators accountable.

This operation highlights the complex challenges and the collaboration required to tackle cybercrime, especially on the dark web. It also sends a strong message about the global commitment to combating internet-based criminal activities, especially those exploiting children.