Amadey, StealC malware operations disrupted in Operation Endgame action

Microsoft, Europol and international partners coordinated Operation Endgame to disrupt infrastructure linked to the Amadey and StealC malware operations (and to target loaders such as SocGholish), seizing or sinkholing hundreds of servers and domains, recovering cryptocurrency and millions of stolen credentials, and involving multiple private-sector intelligence contributors; the report highlights the malware-as-a-service model, widespread credential theft feeding ransomware and fraud, and the persistent risk that threat actors will rebuild infrastructure.