INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Cryptocurrency Laundering and Cybercrime

| 2026-06-12 10:00 LOW MEDIUM
JSON
Executive Summary AI-generated
The shutdown of AudiA6, a cryptocurrency laundering service, has been the result of a massive international operation led by US and IRS agencies. The joint investigation uncovered the group's complex network, involving multiple countries and entities, with servers and domains located in various locations worldwide. This daring takedown not only dismantled the financial infrastructure for illicit activities but also brought to light the involvement of prominent figures within the dark web marketplaces.
Technical Mitigations AI-generated
• Use of blockchain analysis tools to audit financial records. • Utilization of Telegram accounts for communication and network management. • Seizure of digital devices, including computers and servers, from properties.
Technical Observables
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Operation TheOperation The
Target & Sectors
NORTH_AMERICA NORTH_AMERICA DACH DACH NORDICS NORDICS
Incident Timeline
‎2026/06/12
The AudiA6 group used both commercial email providers and email addresses linked to its control to register money mule accounts with cryptocurrency exchanges.
organisation the US Secret Service
This development results from a large-scale joint investigation by the US Secret Service Cyber Investigative Section and the IRS Criminal Investigation (IRS-CI).
organisation the IRS Criminal Investigation
This development results from a large-scale joint investigation by the US Secret Service Cyber Investigative Section and the IRS Criminal Investigation (IRS-CI).
organisation IRS-CI
This development results from a large-scale joint investigation by the US Secret Service Cyber Investigative Section and the IRS Criminal Investigation (IRS-CI).
organisation the US Department of Justice
Seizure banner (Source: the US Department of Justice)
financial $19,234,331 $ worth
Further research revealed that 393.39 BTC (worth around $19,234,331) came directly from ransomware organisations, dark web markets, and similar other cybercrime platforms.
financial $389,747,417 $ worth
They discovered that approximately 10,333 Bitcoin (worth roughly $389,747,417 at the time) were received in AudiA6 wallets since its launch in 2021.
organisation the Criminal Setup The
Seizure of the Criminal Setup The joint action simultaneously targeted the group’s physical and digital assets.
organisation Telegram
They blocked active Telegram accounts used by the network and froze remaining cryptocurrency assets.
organisation Europol
According to Europol’s press release , the AudiA6 group used both commercial email providers and email addresses linked to domains under its control to register money mule accounts with cryptocurrency exchanges.
financial $389 $ Crypto Laundering Case
Feds Seize AudiA6 and Dark2Web in $389M Crypto Laundering Case.
Tactical Metrics
Metrics
financial
19,234,331
$ Worth
Further research revealed that 393.39 BTC (worth around $19,234,331) came directly from ransomware organisations, dark web markets, and similar other cybercrime platforms.
Metrics
financial
389,747,417
$ Worth
They discovered that approximately 10,333 Bitcoin (worth roughly $389,747,417 at the time) were received in AudiA6 wallets since its launch in 2021.
Metrics
financial
389,000,000
$ Crypto Laundering Case
Feds Seize AudiA6 and Dark2Web in $389M Crypto Laundering Case.
Intelligence Sources
HackRead 2026-06-12
HackRead 2026-06-12