International law enforcement dismantles infrastructure of Gootloader, CastleRAT, and StealC malware operations
Europol and partners from nine countries seized 257 domains and 235 servers linked to Gootloader, CastleRAT, and StealC malware families, disrupting their cybercriminal operations. Active since 2020, Gootloader is a loader, while CastleRAT (since 2025) is a remote access trojan, and StealC is an infostealer targeting credentials and cryptocurrency wallets. Authorities identified 6.4 million stolen victim datasets, utilized by cybercriminals for further attacks including ransomware. This action is part of Operation Endgame targeting cybercrime-as-a-service networks. Victims’ stolen credentials will be shared with multiple platforms to enable alerting and remediation, particularly urging WordPress users to update credentials and enable MFA.
Linha do tempo
-
International law enforcement dismantles infrastructure of Gootloader, CastleRAT, and StealC malware operations
ler a análise desta fonte ocultar
Europol and partners from nine countries seized 257 domains and 235 servers linked to Gootloader, CastleRAT, and StealC malware families, disrupting their cybercriminal operations. Active since 2020, Gootloader is a loader, while CastleRAT (since 2025) is a remote access trojan, and StealC is an infostealer targeting credentials and cryptocurrency wallets. Authorities identified 6.4 million stolen victim datasets, utilized by cybercriminals for further attacks including ransomware. This action is part of Operation Endgame targeting cybercrime-as-a-service networks. Victims’ stolen credentials will be shared with multiple platforms to enable alerting and remediation, particularly urging WordPress users to update credentials and enable MFA.