Danabot Takedown Deals Blow to Russian Cybercrime

**Executive summary:** The report covers a coordinated international takedown of the Danabot malware-as-a-service and botnet—originally an infostealer/banking trojan that evolved into a large MaaS operation used to distribute ransomware and conduct espionage; US authorities seized C2 servers and 16 individuals were indicted, though key leaders remain at large in Russia, and private-sector partners played a major role in the disruption.