Operation Endgame gave defenders a rare clean scoreboard: servers and domains actioned, credentials recovered, crypto assets restricted, and compromised websites remediated.

Fox Tempest is useful as more than another cybercrime disruption story. It gives defenders a rare before-and-after window into something more durable: the market for rented software trust.

A bad IP can be accurate and still tell the wrong story.