Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered

A multinational operation (Operation Endgame) involving law enforcement and private companies disrupted the infrastructure behind the Amadey loader and StealC stealer, dismantling hundreds of servers and domains, flagging over $47M in illicit cryptocurrency, and recovering millions of stolen credentials; the report details both malware families’ features, MaaS affiliate models, exploitation vectors (compromised WordPress sites, phishing, loaders), and the global scale of infections and takedown actions.