Europol Dismantles Infrastructure of Gootloader, CastleRAT, and StealC Malware Networks Seizing 235 Servers and 6.4 Million Stolen Records
Europol, with international partners, disrupted the cybercrime-as-a-service infrastructure supporting Gootloader, CastleRAT, and StealC malware networks. The coordinated operation led to the seizure of 235 servers and 257 domains, and the recovery of 6.4 million victim datasets used for credential theft and enabling ransomware deployment. Gootloader exploited compromised WordPress sites to deliver malware through fake legal documents, CastleRAT provided flexible remote access trojan capabilities, and StealC functioned as an information stealer with dropper functionalities. Victims will be notified through services like HaveIBeenPwned and The Shadowserver Foundation. The operation targeted the enabling platforms rather than arresting all individual operators, highlighting ongoing efforts to disrupt infrastructure facilitating ransomware and data theft globally. WordPress administrators are advised to strengthen security measures including changing credentials and enabling multifactor authentication.
Linha do tempo
-
Europol Dismantles Infrastructure of Gootloader, CastleRAT, and StealC Malware Networks Seizing 235 Servers and 6.4 Million Stolen Records
ler a análise desta fonte ocultar
Europol, with international partners, disrupted the cybercrime-as-a-service infrastructure supporting Gootloader, CastleRAT, and StealC malware networks. The coordinated operation led to the seizure of 235 servers and 257 domains, and the recovery of 6.4 million victim datasets used for credential theft and enabling ransomware deployment. Gootloader exploited compromised WordPress sites to deliver malware through fake legal documents, CastleRAT provided flexible remote access trojan capabilities, and StealC functioned as an information stealer with dropper functionalities. Victims will be notified through services like HaveIBeenPwned and The Shadowserver Foundation. The operation targeted the enabling platforms rather than arresting all individual operators, highlighting ongoing efforts to disrupt infrastructure facilitating ransomware and data theft globally. WordPress administrators are advised to strengthen security measures including changing credentials and enabling multifactor authentication.