International operation dismantles malware networks, exposes 6.4 million stolen credentials

By Greg Otto

AI Summary

Operation Endgame's second phase dismantled the Gootloader, CastleRAT, and StealC malware infrastructure — loaders and infostealers that serve as initial-access tools for ransomware operations — exposing 6.4 million stolen credentials. Europol coordinated the action with nine countries, with German authorities tracing rebuilt StealC servers to the Virtualine bulletproof hosting provider previously seized by the FBI in October.

Read full article → https://cyberscoop.com/operation-endgame-malware-t…

Relevance score: 82.0/100

# More from November 13

1
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2 The Hacker News
2
New N-able "4EverAble2Shell" zero-day exploited hours after PoC released BleepingComputer
3
US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance CyberScoop
4
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely The Hacker News
6
ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients The Hacker News
7
Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass The Hacker News
8
New Windows SignDrop zero-day gives hackers SYSTEM privileges BleepingComputer
9
Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories The Hacker News
10
AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets The Hacker News