CYBERSECURITYTRACKER
Permanent story citation

Operation Endgame malware takedown turns up over 6 million stolen logins

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 13239

As cited

Copy frozen at (site build).

threat intel

Operation Endgame malware takedown turns up over 6 million stolen logins

Law enforcement in nine countries, coordinated by Europol, dismantled infrastructure supporting the Gootloader, CastleRAT, and StealC malware operations and recovered over 6 million stolen credentials. The action is part of Operation Endgame, an international effort targeting services that provide initial access to networks for ransomware groups. The recovered credentials were harvested from infected computers and sold by the suspects.

Why it matters: Organizations and individual users whose credentials were among the 6 million recovered should assume compromise and reset passwords immediately, while security teams should check for indicators associated with these malware families in their environment.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Operation Endgame malware takedown turns up over 6 million stolen logins

Law enforcement in nine countries, coordinated by Europol, dismantled infrastructure supporting the Gootloader, CastleRAT, and StealC malware operations and recovered over 6 million stolen credentials. The action is part of Operation Endgame, an international effort targeting services that provide initial access to networks for ransomware groups. The recovered credentials were harvested from infected computers and sold by the suspects.

Why it matters: Organizations and individual users whose credentials were among the 6 million recovered should assume compromise and reset passwords immediately, while security teams should check for indicators associated with these malware families in their environment.

VendorsWordPress
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Operation Endgame malware takedown turns up over 6 million stolen logins

Law enforcement in nine countries, coordinated by Europol, dismantled infrastructure supporting the Gootloader, CastleRAT, and StealC malware operations and recovered over 6 million stolen credentials. The action is part of Operation Endgame, an international effort targeting services that provide initial access to networks for ransomware groups. The recovered credentials were harvested from infected computers and sold by the suspects.

Why it matters: Organizations and individual users whose credentials were among the 6 million recovered should assume compromise and reset passwords immediately, while security teams should check for indicators associated with these malware families in their environment.

VendorsWordPress
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Operation Endgame malware takedown turns up over 6 million stolen logins

Law enforcement in nine countries, coordinated by Europol, dismantled infrastructure supporting the Gootloader, CastleRAT, and StealC malware operations and recovered over 6 million stolen credentials. The action is part of Operation Endgame, an international effort targeting services that provide initial access to networks for ransomware groups. The recovered credentials were harvested from infected computers and sold by the suspects.

Why it matters: Organizations and individual users whose credentials were among the 6 million recovered should assume compromise and reset passwords immediately, while security teams should check for indicators associated with these malware families in their environment.

VendorsWordPress
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary