Cyber investigation

Photographee.ecu - stock.adobe.co

Cyber investigation Microsoft has taken down the RedDVS cyber crime-as-a-provider community after obtaining a UK court docket account for, marking its first civil perfect motion commence air of the US

cyber investigation Alex Scroxton

By

Printed: 14 Jan 2026 17:00

In its first ever fundamental perfect motion commence air the US, Microsoft’s Digital Crimes Unit (DCU) has disrupted cyber crime-as-a-provider community RedVDS – whose subscribers comprise cheated their victims out of millions of pounds – after obtaining separate court docket orders in the UK and Florida.

The DCU modified into to the British perfect system for the reason that malicious infrastructure former to tear RedVDS became hosted by a UK-primarily based fully mostly provider. An ideal different of victims of RedVDS customers, smartly over 7,500, are moreover positioned in the UK, it talked about.

“Cyber crime in the present day is powered by shared infrastructure, which approach disrupting particular person attackers is no longer adequate. Thru this coordinated motion, Microsoft has disrupted RedVDS’s operations, along side seizing two domains that host the RedVDS marketplace and customer portal, whereas moreover laying the groundwork to identify the people in the abet of them,” talked about Microsoft DCU assistant traditional counsel, Stephen Masada.

The takedown operation drew Europol’s European Cybercrime Centre (EC3), with extra reinforce provided by the German authorities by the Central Put of commercial for Combating Net Crime (ZIT) at the Public Prosecutor’s Put of commercial in the metropolis of Frankfurt-am-Fundamental, and the Prison Police Put of commercial for the issue of Brandenburg.

On the time of writing, the RedVDS net situation states that its arena has been seized by Microsoft.

Cyber investigation Industrialised fraud

The RedDVS cyber prison provider charged as cramped as $24 (£18) month-to-month to manufacture digital fraudsters with access to disposable digital computers former to scale fraud operations cheaply and securely.

The DCU believes RedVDS customers comprise compromised more than 191,000 organisations worldwide since September 2025 and netted over $40m in the US by myself, with smartly-known victims along side Alabama-primarily based fully mostly H2-Pharma, a seller of allergic reaction, cancer and mental health medications, which lost $7.3m; and Florida-primarily based fully mostly Gatehouse Dock Condominium Association, which became tricked out of $500,000 it had feature apart for repairs to its participants’ houses.

The provider became former for a substantial series of cyber prison allege, along side working phishing campaigns, net net hosting malicious infrastructure and facilitating fraud. It became continually former alongside generative AI (GenAI) instruments to aid identify more targets quicker, generate more convincing lures, and in some cases to manipulate video photography or clone voices.

Nonetheless, the build RedVDS seemed as if it would excel became in supporting commercial email compromise (BEC) the build cyber criminals impersonate trusted people to send funds to accounts they retain an eye on.

Namely, its customers targeted the staunch estate sector, compromising the accounts of estate brokers, escrow brokers or title corporations. The DCU believes that as many as 9,000 customers in the staunch estate industry, most in Australia and Canada, had been plagued by this allege to a few level.

Masada talked about the DCU’s latest motion constructed on ongoing efforts to disrupt fraud and scam infrastructure by both perfect and technical actions, and by world collaboration.

“It marks the 35th civil motion focusing on cyber crime infrastructure by Microsoft’s Digital Crimes Unit, underscoring a sustained diagram to trot beyond particular person takedowns and dismantle the companies that criminals depend upon to feature and scale,” he talked about.

“As companies like RedVDS proceed to emerge, Microsoft will preserve working with partners across sectors and borders to identify and disrupt the infrastructure in the abet of cyber-enabled fraud, making it more difficult for criminals to benefit and more straightforward for fogeys and organisations to preserve safe on-line.”

Read more on Hackers and cybercrime prevention


Read Extra