A large-scale operation named 'Final Action' was conducted by France, Germany, and the Netherlands to combat the ecosystem of malicious software distributors. This operation, which took place from May 27 to 29, 2024, targeted various malware distributors, including IcedID, SystemBC, Pikabot, Smokeloader, Bumblebee, and Trickbot.

The investigation revealed that one of the main suspects had earned at least 69 million euros (approximately 75 million dollars) in cryptocurrency by deploying ransomware through a rented criminal infrastructure website. Law enforcement agencies are closely monitoring the suspect's transactions and have obtained legal permission to seize these assets in future operations.

The press release issued by the European Police Organization did not mention any specific cryptocurrency or platform used in the transactions. However, the operation made significant progress in disrupting the malware ecosystem. Four individuals were arrested, one in Armenia and three in Ukraine. In addition, 16 locations were searched in Armenia, the Netherlands, Portugal, and Ukraine.

Over 100 servers were shut down or disrupted in several countries, including Bulgaria, Canada, Germany, Lithuania, the Netherlands, Romania, Switzerland, the UK, the US, and Ukraine. Authorities also took control of more than 2000 domain names. This operation demonstrates the global effort to combat cybercrime and protect individuals and organizations from malicious software.

The success of this operation highlights the importance of international cooperation in combating cybercrime. The arrest of suspects and the seizure of assets will help to disrupt the malware ecosystem and prevent further attacks. The operation also underscores the need for individuals and organizations to be vigilant and take steps to protect themselves from ransomware attacks.

In conclusion, the 'Final Action' operation is a significant achievement in the fight against cybercrime. The disruption of the malware ecosystem and the seizure of assets will help to prevent further attacks and protect individuals and organizations from the threat of ransomware.