‘Operation Endgame’ Hits Malware Delivery Platforms
Summary: Law enforcement agencies in the United States and Europe announced Operation Endgame, a coordinated action against cybercrime platforms that deliver ransomware and data-stealing malware, described as the largest ever operation against botnets. Between May 27 and May 29, 2024, authorities arrested four suspects (one in Armenia and three in Ukraine), disrupted or took down more than 100 Internet servers across ten countries, and seized more than 2,000 domain names supporting dropper infrastructure, while Europol added eight fugitives wanted by Germany to its Most Wanted list on May 30, 2024.
Key Takeaway: Europol said one of the main suspects earned at least EUR 69 million in cryptocurrency by renting out criminal infrastructure to deploy ransomware, and authorities have obtained legal permission to seize those assets upon future actions. The operation targets droppers like IcedID, Smokeloader and Trickbot that sit in the initial stage of a breach, so disrupting them is meant to affect multiple cybercriminal operations at once.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026