International Operation Endgame Dismantles Malware Networks, Exposes 6.4M Stolen Credentials
An international law enforcement operation involving police forces from nine countries and Europol dismantled major infrastructure behind three malware kits: CastleRAT, Gootloader, and StealC. The takedown seized 235 servers and 257 domains, disrupting toolkits used for ransomware and data theft, and identified credentials belonging to 6.4 million victims. CastleRAT, a known remote access trojan, had 120 servers and 39 domains seized. Gootloader spread ransomware via fake legal documents on hacked WordPress sites, with 14 servers and 218 domains taken down, alongside cleanup of 681 infected websites. StealC—a stealer with dropper capabilities—had 102 servers seized, building on earlier action from June 2026. Victim credentials will be shared with major platforms like HaveIBeenPwned to notify affected users. Authorities advise WordPress users to update credentials, enable MFA, and patch vulnerabilities. This effort is part of Operation Endgame, the largest international push against ransomware enablers to date, involving over 30 public and private partners.
Linha do tempo
-
International Operation Endgame Dismantles Malware Networks, Exposes 6.4M Stolen Credentials
ler a análise desta fonte ocultar
An international law enforcement operation involving police forces from nine countries and Europol dismantled major infrastructure behind three malware kits: CastleRAT, Gootloader, and StealC. The takedown seized 235 servers and 257 domains, disrupting toolkits used for ransomware and data theft, and identified credentials belonging to 6.4 million victims. CastleRAT, a known remote access trojan, had 120 servers and 39 domains seized. Gootloader spread ransomware via fake legal documents on hacked WordPress sites, with 14 servers and 218 domains taken down, alongside cleanup of 681 infected websites. StealC—a stealer with dropper capabilities—had 102 servers seized, building on earlier action from June 2026. Victim credentials will be shared with major platforms like HaveIBeenPwned to notify affected users. Authorities advise WordPress users to update credentials, enable MFA, and patch vulnerabilities. This effort is part of Operation Endgame, the largest international push against ransomware enablers to date, involving over 30 public and private partners.