Security · High impactFan score 48 · Tier B7 sources
DOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018
The Brief · written from 7 sources
- Operation Endgame, an international police operation, took down servers behind the Gootloader, CastleRAT and StealC malware tools.
- Investigators seized 235 servers and 257 domains, and about 6.4 million stolen logins.
- The U.S. Department of Justice says Gootloader was used in at least 44 ransomware attacks costing $29 million since 2018.
Why it matters
These malware families were used to gain access to computers, steal passwords and launch ransomware, so credentials and systems they touched may still need review even after the servers were taken down.
Who’s affected
- Organizations whose endpoints may have been infected by Gootloader, CastleRAT or StealC
- Developers and admins whose credentials may have been stolen by these tools
- #malware
- #ransomware
- #law-enforcement
- #takedown
- #infostealer
In a briefing adjacent to European announcements about an international anti-malware operation, U.S. officials detailed the history and impact of the Gootloader ransomware.
Timeline
Full coverage · 7 sources
- 4h ago ↗
The Record from Recorded Future News
DOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018
- 5h ago ↗
Security Affairs
Gootloader Malware Disrupted After Infecting 25,000 Computers - 9h ago ↗
The Hacker News
Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins - 9h ago ↗
- 1d ago ↗
CyberScoop
International operation dismantles malware networks, exposes 6.4 million stolen credentials - 1d ago ↗
- 1d ago ↗