That being said and given the power corporations are gaining year by year it will not be long before Microsoft will file to have their own SWAT team to physically size or destroy computers and/or crackers.
The registry is a single entity that decides which names exist under a particular domain hierarchy, providing this capability might be contracted out to somebody else to do on behalf of the "real" owners of that domain for example the COM domain registry is operated by Verisign under contract.
One or more Registrars provide (mostly sell) the service of managing entries in that registry. For all the popular commercial TLDs there are multiple commercial registrars. The registrars have to abide by rules set by the registry (since if they did not the registry can just stop them providing any services) even if they are not under the same legal jurisdiction as the registry.
For the gTLDs the rules for this playing field are set by ICANN. It would like these rules to apply everywhere, but the ccTLDs are assigned to sovereign entities, and like a two year old, sovereign entities do not take kindly to being told what to do.
I'm waiting to hear the answer too. This sentence seems to be missing context in the rest of the article.
> “Users subject to the negative effects of these malicious applications incorrectly believe that Microsoft and Windows are the source of their computing device problems. There is great risk that users may attribute this problem to Microsoft and associate these problems with Microsoft’s Windows products, thereby diluting and tarnishing the value of the Microsoft and Windows trademarks and brands.”
> Microsoft said it will leverage the seized Trickbot servers to identify and assist Windows users impacted by the Trickbot malware in cleaning the malware off of their systems.
> But so far it’s not clear whether Microsoft succeeded in commandeering all of Trickbot’s control servers, or when exactly the coordinated seizure of those servers occurred.
Just because a court rules in one party's favor doesn't necessarily mean it applies outside of the jurisdiction of the court.
That being said if they were working in coordination with law enforcement then the servers could have at least been secured in a relatively short period of time.