In one of the largest coordinated crackdowns in the history of hacking and law enforcement, hundreds of people have been raided, questioned, or arrested for being connected with the BlackShades malware. Europol claimed 359 raids connected to the Blackshades investigation, with the FBI confirming 97 arrests in 16 countries.

In 2012, together with Eva Galperin from the EFF, Citizen Lab researchers Morgan Marquis-Boire and Seth Hardy identified the use of BlackShades in the targeting of opposition forces in Syria. This work has been featured in the Washington Post, the Daily Beast, The Telegraph and ThreatPost.