Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered
Summary: A coordinated law enforcement operation with Bitdefender, Bitsight, ESET, and Microsoft took down infrastructure behind the Amadey and StealC malware families between June 15 and 19, 2026, dismantling 326 servers and 142 domains. Authorities from Belgium, Canada, Denmark, France, Germany, the Netherlands, the U.K., and the U.S. flagged more than $47 million in criminal cryptocurrency and recovered 27 million stolen login credentials, while Microsoft linked the two families to over 140,000 infected computers in the first two weeks of May 2026.
What's compelling: Microsoft identified more than 18,000 victim machines in a single operation, and Amadey payload distribution hit 11,635 samples in 2025 against 66 in 2019 - the loader-and-stealer pipeline behind ransomware and fraud is scaling faster than takedowns can retire it.
Read the original at The Hacker News ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026