ESET takes part in Operation Endgame to disrupt Amadey and Stealc

ESET participated in Operation Endgame to disrupt two malware-as-a-service families—Amadey (loader) and Stealc (infostealer)—by contributing long-term telemetry, technical analysis, RC4 keys, build and campaign identifiers, and C2 lists; the operation impacted roughly 50 domains and nearly 200 active C2 IPs, and the report details both families’ architectures, C2 protocols, clustering methodology (53 Amadey clusters, 73 Stealc clusters), representative IoCs, and MITRE ATT&CK mappings to support detection and future monitoring.