European law enforcement announced the closure of a seven‑month investigation that targeted illegal streaming networks and the organized crime groups that run them. The operation, dubbed Operation Kratos 2 and led by Bulgaria and Europol, culminated in April with arrests, seizures and a large set of referrals for criminal prosecution.
Operation Kratos 2: arrests, searches and court referrals
Authorities arrested 29 alleged cybercriminals and identified 86 suspects during the operation, Europol said. Investigators conducted 148 house searches, dismantled nine organized crime groups that supported illicit streaming networks, and referred 59 cases to courts for criminal proceedings. The effort, which ran for seven months and concluded in April, targeted the infrastructure and management behind piracy platforms rather than naming individual services or suspects.
Scale of the takedown: domains, URLs and media infringements
Europol reported the teams took down more than 27,000 illegal streaming URLs and said the streaming sites infringed on nearly 850,000 media items across 169 domains. Working with private partners, investigators identified almost 4,400 new domains and more than 18,000 IP addresses linked to piracy and other illegal activity. Those discoveries allowed authorities to report almost 400,000 additional URLs for suspension or removal.
How the piracy networks were structured
Investigators described a layered infrastructure: operators host separate servers for customer‑facing websites and for storing illegal content, and they distribute services across multiple countries. Europol characterized the networks as complex criminal enterprises that present consumers with low‑cost access to premium sporting events, films and TV programming while relying on international hosting and distribution to evade enforcement.
Private partners and international participation
Operation Kratos 2 involved cooperation between public authorities and private anti‑piracy stakeholders. The effort was supported by anti‑piracy associations and rights holders including UEFA Europa League, La Liga and beIN Media Group, and included officials from Belgium, Bulgaria, Croatia, France, Greece, Ireland, Italy, the Netherlands, Poland, Romania, Spain, the United Kingdom and the United States. Europol credited this cross‑border and public‑private coordination with enabling the identification of new domains and IP addresses and with the large volume of URLs reported for takedown.
Live sports piracy context and a recent precedent
Europol noted that live sports piracy networks are widespread and consistently tracked by antipiracy coalitions and authorities globally. The agency’s announcement referenced a recent, high‑profile shutdown in Egypt last year of Streameast — described in the release as the most popular and largest illegal live sports streaming network at the time — which spanned 80 domains and logged more than 1.6 billion visits during the prior year. Europol used that example to situate Operation Kratos 2 within an ongoing pattern of coordinated enforcement actions against live‑stream piracy.
What this means for rights holders, investigators, and consumers
- Rights holders (UEFA Europa League, La Liga, beIN Media Group): the operation demonstrates active collaboration with law enforcement to identify domains, IP addresses and URLs for suspension or removal and to pursue criminal cases against operators.
- Investigators and prosecutors: the scale of domain and IP discoveries — almost 4,400 domains and over 18,000 IPs — fed nearly 400,000 additional URLs for takedown and produced 59 case referrals to courts, underscoring a pathway from technical identification to legal action.
- Consumers: Europol’s characterization of these services stresses that ostensibly low‑cost access can be the outward face of complex criminal enterprises, with operators deliberately separating public websites from content servers and distributing infrastructure internationally.
Operation Kratos 2 is a snapshot of a recurring enforcement pattern: coordinated, multi‑jurisdictional investigations that attack the technical foundations of illicit streaming while building cases for prosecution. With 29 arrests, 148 searches and 59 referrals to courts, the immediate tactical phase has ended; the long tail now moves through criminal proceedings and continued domain and URL suspension efforts.
https://cyberscoop.com/europol-piracy-streaming-crackdown-operation-kratos2/
