Ministério of Justiça and Segurança Pública coordinated, this Thursday (27), the eighth phase of Operação 404, which blocked 535 irregular websites and a streaming application dedicated to the unauthorized distribution of multimedia content. The mobilization took place in 15 Brazilian states and involved security forces from six countries, with a focus on dismantling criminal networks operating on the internet. The actions aim to suppress copyright violations, such as the illegal offering of films, series, music and games, a practice that affects the creative economy.
Civil police from several states carried out 48 search and seizure warrants, resulting in seven arrests. Targets include suspects of criminal association and money laundering, crimes that accompany digital piracy. Content was removed from servers, and domains were deindexed from search engines to prevent access.
The operation, named in reference to the 404 error of pages not found, integrated the Laboratório of Operações Cibernéticas (Ciberlab) and the Coordenação-General of Crimes Cibernéticos. Participaram Argentina, Equador, Paraguai, Peru and Reino Unido, with México and Estados Unidos as observers. Essa collaboration expanded reach, blocking platforms that cross borders.
National reach of searches
Agents from Polícia Federal and civil police worked in cities such as Cuiabá, Curitiba and São Paulo, focusing on schemes that monetize ads on illegal streaming sites.
In Mato Grosso, the action targeted the distribution of unlicensed anime, violating the rights of companies associated with Content Overseas Distribution Association (CODA). The sites generated revenue through advertising, which worsens the losses to rights holders.
Fake social media profiles were removed, and domain lists were sent to Organização Mundial of Propriedade Intelectual (WIPO) for global monitoring. Essa stage prevented the rapid reactivation of the platforms.
International partnerships strengthen the fight
Cooperation with foreign agencies allowed the blocking of servers hosted outside of Brasil, such as on Argentina and Peru. Autoridades from Unidade Fiscal Especializada and Investigación from Ciberdelitos (UFEIC) from Argentina contributed intelligence data.
- In Reino Unido, City of London Police – Police Intellectual Property Crime Unit identified domains linked to shared networks.
- Instituto Nacional de Defensa de la Competencia y de la Protección de la Propiedad Intelectual (INDECOPI), do Peru, provided evidence of illegal traffic.
- Entities such as Alliance for Creativity and Entertainment (ACE) and Associação Brasileira of
These partnerships resulted in the removal of over 300 sites in a single wave, surpassing previous phases in scale.
The operation also addressed associated risks, such as the spread of malware on pirated platforms, which exposes users to data theft and card cloning. Autoridades highlight that access to these sites compromises consumers’ digital security.
Details of arrests and indictments
Seven individuals were detained during the searches, with the seizure of equipment used to host content. The suspects face charges of copyright infringement, with a prison sentence of two to four years, in addition to a fine.
In a residence in Cuiabá, agents found servers that distributed pirated anime to thousands of monthly hits. The scheme had been operating for months, integrating a larger network with branches in other states.
The investigations revealed revenue flows estimated at significant amounts, directed to offshore accounts. Policiais of Mato Grosso of Sul and Minas Gerais coordinated parallel actions, seizing devices with irrefutable digital evidence.
Additional warrants targeted profiles on messaging apps that facilitated illegal sharing. Forensic analysis identified operating patterns that link targets to international groups.
Cyber risks beyond piracy
Irregular websites often embed malicious scripts that capture visitors’ personal information. In previous phases of the operation, cases of leakage of banking credentials via false advertisements were detected.
- Exposed users face targeted phishing, with links that install viruses without consent.
- Illegal streaming platforms record browsing data, facilitating social engineering attacks.
- Reports indicate that 40% of the websites analyzed contained malware, according to cyber intelligence data.
Removing these domains reduces Internet users’ exposure to threats, promoting a safer digital environment. Autoridades recommend using licensed services to avoid these dangers.
The blocking included notification to internet providers to filter access to the affected domains. Essa technical measure ensures that viewing attempts result in connection errors, aligning with the name of the operation.
History of previous phases
Since 2019, Operação 404 has evolved from local actions to global mobilizations, with the accumulation of blocks exceeding thousands of sites. Na seventh phase, in September 2024, 675 platforms were taken down, including 14 applications.
The expansion incorporated new tracking technologies, such as network traffic analysis and domain monitoring. Essa progression resulted in cumulative arrests of dozens of those involved.
In March 2023, the sixth stage removed 199 gaming and streaming sites, as well as 63 music apps. Essas Partial victories paved the way for the current offensive, which doubled the number of warrants served.
The operation demonstrates the authorities’ ability to adapt to criminal tactics, such as the use of VPNs to mask origins. Investimentos in cyber training support this continuity.
