--- title: "Citadel Botnet: How These Associations Helped Fight Back" id: "17839" type: "post" slug: "citadel-botnet-how-these-associations-helped-fight-back" published_at: "2013-06-07T21:02:22+00:00" modified_at: "2026-11-09T19:03:35+00:00" url: "https://associationsnow.com/2013/06/07/citadel-botnet-how-these-associations-helped-fight-back/" markdown_url: "https://associationsnow.com/2013/06/07/citadel-botnet-how-these-associations-helped-fight-back.md" excerpt: "With the Citadel botnet potentially responsible for more than $500 million stolen from bank accounts worldwide, a number of banking associations have worked with Microsoft, the FBI and more than 80 countries to help fight the network." taxonomy_category: - "Advocacy" taxonomy_post_tag: - "AssociationsNow" - "botnet" - "Business" - "cybercrime" - "cybersecurity" - "Technology" taxonomy_content_format: - "Article" taxonomy_role: - "Association CEO / Executive Director" - "Executive Team" taxonomy_persona: - "Association Professionals" --- [Home](https://associationsnow.com/) » [Articles](https://associationsnow.com/format/article/) » Citadel Botnet: How These Associations Helped Fight Back The infiltration and takedown of a huge part of the Citadel botnet this week showed what can happen when the public and private sectors work together to fight cybercrime. Microsoft led the private-sector effort to disrupt the major cybercrime ring, but a number of industry groups played roles as well. More details: **The situation:** Over the past year and a half, authorities believe, a series of botnets— networks of connected computers that have been hacked and set up to transmit information unbeknownst to their owners—based in 90 different countries have stolen more than $500 million from the bank accounts of consumers and businesses. The targeted companies included American Express, PayPal, Bank of America, and Citigroup, according to Microsoft. The tech company got involved due to the way the botnet was spread—through malware-infected versions of Microsoft’s Windows XP sold on the black market, [according to a report from Information Week (opens in a new tab)](http://www.informationweek.com/security/attacks/microsoft-fbi-trumpet-citadel-botnet-tak/240156171) . **The takedown:** On Wednesday, Microsoft and the FBI took down approximately 1,000 of the 1,463 botnets in the Citadel ring. The company’s Digital Crimes Unit helped in several ways, providing information it gained from the court-ordered seizure of servers from two U.S.-based hosting facilities to computer emergency response teams overseas. The FBI simultaneously offered similar information to authorities abroad. Though the culprits behind the botnet remain at large, the results of the investigation are something of a breakthrough on the cybercrime front: The investigation is the first prominent example of the federal government and the private sector working together to stop this kind of ring. **How the associations helped:** The takedown wouldn’t have happened without the help of three industry groups: the Financial Services Information Sharing and Analysis Center (FS-ISAC); the American Bankers Association (ABA); and NACHA — The Electronic Payments Association. The groups worked with the FBI and U.S. Marshals Service, offering details of how online banking credentials were stolen by the botnets and then used to initiate fraudulent transactions. “I am hopeful we have a model that will allow us to get closer and closer to those who are the ultimate perpetrators of these crimes,” ABA Vice President Doug Johnson said [in an interview with Reuters (opens in a new tab)](http://www.reuters.com/article/2013/06/06/net-us-citadel-botnet-idUSBRE9541KO20130606) . Although the reach of the botnet has been hobbled, information security experts warn that the danger is far from over—especially with the botnet’s creators still at large. “While it’s good to see botnets like Citadel being shut down, without arrests I feel we are simply treating symptoms rather than the disease,” information security consultant Brian Honan noted [in a tweet (opens in a new tab)](https://twitter.com/BrianHonan/status/342555966807629825) cited by *Information Week*. (iStockphoto/Thinkstock) [Ernie Smith](https://associationsnow.com/author/ernie-smith/) Ernie Smith is a former senior editor for Associations Now. [More articles by this author](https://associationsnow.com/author/ernie-smith/) Tags: [#botnet](https://associationsnow.com/tag/botnet/) [#Business](https://associationsnow.com/tag/business/) [#cybercrime](https://associationsnow.com/tag/cybercrime/) [#cybersecurity](https://associationsnow.com/tag/cybersecurity/) [#Technology](https://associationsnow.com/tag/technology/) **Stay Informed** [Subscribe to our free newsletter](https://associationsnow.com/newsletter/) , *Associations Now Daily News*, to find out what’s happening in the association world every business day. ## You Might Like - [PodcastAssociations Now Presents: Beyond the Tech Stack: How AI Is Changing the Association PlaybookOctober 29, 2026](https://associationsnow.com/2026/10/29/associations-now-presents-beyond-the-tech-stack-how-ai-is-changing-the-association-playbook/) - [PodcastSecuring Identity: What Associations Need to Know About Verifiable CredentialsJune 25, 2025](https://associationsnow.com/2025/06/25/securing-identity-what-associations-need-to-know-about-verifiable-credentials/) - [VideoThe Career Moves Every Association Leader Needs Right NowSeptember 24, 2026](https://associationsnow.com/2026/09/24/the-career-moves-every-association-leader-needs-right-now/) - [VideoNCRA: Safeguarding Cancer Surveillance: An Advocacy Response to FY26 Budget ThreatsSeptember 24, 2026](https://associationsnow.com/2026/09/24/ncra-safeguarding-cancer-surveillance-an-advocacy-response-to-fy26-budget-threats/) ## Comments **Comments are for ASAE members.** [Learn more about comments on this site.](https://associationsnow.com/comments/) [Log in](https://associationsnow.com/login?redirect_to=https%3A%2F%2Fassociationsnow.com%2F2013%2F06%2F07%2Fcitadel-botnet-how-these-associations-helped-fight-back%2F%23comments) to your member account or [join ASAE](https://my.asaecenter.org/select-a-membership-type/) !