How a Romanian cybersecurity firm became a global force in dismantling darknet markets
In short: Founded in Bucharest in 2001, Bitdefender has evolved from a local antivirus developer into a global cybersecurity powerhouse. Beyond protecting millions of consumer devices, the company works alongside international law enforcement to dismantle darknet markets, neutralize ransomware botnets, and provide free decryption tools to victims of global cyberattacks.
Bitdefender traces its origins to SOFTWIN, a company established in 1990 in post-communist Romania. Initially marketing its software as Antivirus Expert, the firm rebranded as Bitdefender in 2001. Since then, it has expanded its footprint significantly, establishing a global presence with offices across the United States, Europe, Australia, and the Asia-Pacific region. By 2026, the company employed over 2,000 people worldwide, with the United States market alone accounting for more than 40% of its total revenue.
The company’s influence extends deep into the infrastructure of global law enforcement. Since 2016, Bitdefender has advised Europol’s European Cybercrime Centre, providing technical intelligence that helped dismantle major darknet marketplaces like AlphaBay, Hansa, Sipulimarket, and Silkktie. In 2024, the company served as a supporting partner for Operation Endgame, a massive international effort that successfully took down over 100 servers associated with botnets like IcedID and Pikabot. A subsequent phase of the operation in November 2025 resulted in the takedown of 1,025 additional servers.
Bitdefender’s approach to cybersecurity often sparks debate, particularly regarding the public disclosure of vulnerabilities in malware. In 2021, the company released a decryptor for the DarkSide ransomware, a move that drew criticism from some researchers who argued the public announcement tipped off hackers to their own coding errors. Bitdefender defended the decision, emphasizing the importance of providing immediate relief to victims. This tension highlights a broader industry dilemma: while free decryption tools offer critical aid to those targeted by ransomware, they also provide cybercriminals with the feedback necessary to refine and improve their malicious software.
Today, Bitdefender operates a sophisticated network of Security Operations Centers, including a key facility in San Antonio, Texas. Its product suite has grown to include AI-driven scam detection tools like Scam Protection and advanced enterprise solutions managed through its GravityZone platform. By integrating threat intelligence into diverse partnerships—ranging from Scuderia Ferrari to various global law enforcement agencies—the company remains a central, if sometimes controversial, player in the ongoing battle against digital threats.
Opens the Intellect+ feed with this card first. Swipe up for the next one.
Sources
- Summary by Intellect · source: Bitdefender
- Also: Wikidata — Bitdefender · CC0
To cite this card, link to https://intellectplus.co.uk/app/places-bitdefender.
How we source, check and correct cards: Editorial standards.
General information, not professional advice. Spotted an error? Flag the card or see corrections and complaints.
Intellect Plus is a visual educational discovery platform for exploring fascinating facts and ideas. Brain Food, Not Brain Rot. What is Intellect Plus?
Related
More in Europe and Russia · More in Countries & Cities · Latest · A–Z · All topics
