Microsoft, which led the effort, said it seized 330 domains that powered the phishing platform’s core infrastructure. The alleged creator was also named in a civil complaint.

The marketplace was one of the world’s largest hubs for cybercrime with more than 142,000 members. Officials identified and arrested multiple suspects after seizing the site’s database.

The 47-year-old man, who was not identified, faces up to five years in prison for producing, obtaining and sharing computer programs used to conduct cyberattacks.

The Cybersecurity and Infrastructure Security Agency said the attack highlighted threats from vulnerable edge devices to operational technology and industrial control systems.

Produced with other world cyber agencies, the document is a “shared vision” of SBOMs, or software bill of materials.

The Chinese government-linked hackers were the subject of an alert from U.S. and international partners.

The 21 signatories support a number of steps, such as banning vendors who behave illegally, in a document agreed to last week in Paris.

The attack campaigns show how spyware tech companies have become more akin to nation-state threat actors.

Brett Leatherman, Deputy Assistant Director for Cyber Operations, FBI

Poland was once a “dark spot” on spyware abuse, but a probe, victim notifications and more has made it a potential model for other nations.