Operation Lightning, led by European and U.S. authorities, targeted the "SocksEscort" service, seizing infrastructure and freezing $3.5 million in cryptocurrency. The investigation uncovered a botnet of infected devices used for criminal activities like ransomware and DDoS attacks.