"more than 1,300 malicious servers"
Assuming the culprits don't run on prem these must have been hosted somewhere. I wonder what mileage there might be in prosecuting or victims suing the hosting companies as accessories. A bit of KYC in the hosting business might go a long way in dealing with this.