# Peer Pressure: Inside the Sality Botnet Disruption Operation

DevFeed: [Peer Pressure: Inside the Sality Botnet Disruption Operation](<https://devfeed.tech/articles/peer-pressure-inside-the-sality-botnet-disruption-operation-8308.md>)

Original publisher: [Read original article](<https://www.crowdstrike.com/en-us/blog/inside-sality-botnet-disruption-operation/>)

Author: CrowdStrike Counter Adversary Operations

Published: 2026-09-12T11:17:51.295154Z

Content type: article

Language: en

Sources: [Blog](<https://devfeed.tech/sources/blog.md>)

Topics: [P2P](<https://devfeed.tech/topics/p2p.md>), [Cybercrime](<https://devfeed.tech/topics/cybercrime.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [collaboration](<https://devfeed.tech/tags/collaboration.md>), [department-of-justice](<https://devfeed.tech/tags/department-of-justice.md>), [industry](<https://devfeed.tech/tags/industry.md>), [operations](<https://devfeed.tech/tags/operations.md>), [partnership](<https://devfeed.tech/tags/partnership.md>), [support](<https://devfeed.tech/tags/support.md>), [threat-hunting-intel](<https://devfeed.tech/tags/threat-hunting-intel.md>)

## AI overview

CrowdStrike describes a coordinated operation that disrupted the Sality peer-to-peer botnet, which had distributed malicious payloads to more than 33,000 infected machines worldwide. The operation used peer-to-peer sinkholing to isolate infected machines and disable the criminal command channel, with support from international law enforcement and industry partners.

## Source excerpt

CrowdStrike collaborated with international law enforcement and industry partners to execute a coordinated disruption of the Sality peer-to-peer botnet.