logo

Europol Disrupts StealC and Amadey Malware Infrastructure in Operation Endgame

ID: 1bc52e24-60a5-5170-b5d1-c3bb18187d6b

STIX ID: report--1bc52e24-60a5-5170-b5d1-c3bb18187d6b

Feed Name: Security Affairs

Threat Score
80/100

Date Published: 2026-06-24

Date Updated: 2026-06-25

Author: Pierluigi Paganini

...
...

**Operation Endgame**: A coordinated international law-enforcement action disrupted the infrastructure behind SocGholish, Amadey, and StealC—malware and services that provide initial access, credential harvesting, and dropper functionality used to enable ransomware, fraud, and attacks on critical infrastructure—resulting in remediation of nearly 15k infected websites, recovery of 27 million stolen credentials, action on 326 servers/142 domains, and the flagging of over €41 million in criminal crypto assets.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.