Police seize over 100 malware loader servers, arrest four cybercriminals

Operation Endgame: international law-enforcement action (May 27–29, 2024) seized over 100 servers and more than 2,000 domains used by prominent malware loader operations (IcedID, Pikabot, Trickbot, Bumblebee, Smokeloader, SystemBC), led to four arrests and identified eight fugitives, and exposed large-scale abuse of dropper infrastructure that enabled information-stealers and ransomware—one suspect allegedly earned at least EUR 69 million renting out infrastructure.