Dutch authorities arrested a 33-year-old man at Schiphol Airport, believed to be the mastermind behind the AVCheck malware platform. This site, shut down in May 2025, allowed cybercriminals to test their malware against various antivirus systems. The arrest followed an international investigation linked to the platform's takedown.

Jeffrey Bowie, CEO of Veritaco, was arrested for allegedly installing malware on hospital computers at St. Anthony Hospital in Oklahoma City. The malware was designed to take screenshots and send them to an external address, raising concerns about insider threats in healthcare cybersecurity.

Spanish authorities have arrested a 25-year-old Brazilian national known as GoogleXcoder, who is accused of leading the GXC Team crime-as-a-service operation that sold phishing kits and Android malware. The GXC Team targeted banks and other organizations, contributing to significant financial losses through their phishing campaigns.