An indictment is a formal criminal charge brought by prosecutors, usually after a grand jury review in systems that use one. It alleges that a person or company committed a crime, but it is not proof of guilt. The accused remains presumed innocent unless and until the case is proven in court.
In cyber security, indictments often name operators, facilitators, or infrastructure providers tied to phishing, malware, botnets, or abuse-friendly hosting. They matter because they can reveal how an attack ecosystem is organized, identify alleged roles, and support follow-on actions such as warrants, seizures, sanctions, or extradition requests. For defenders, an indictment is a signal to watch the named tools, domains, and services, but it should be treated as an allegation, not a confirmed technical finding.