International
The Morning Dev

Only the news worth knowing

‹
 

Security · High impactFan score 48 · Tier B7 sources

DOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018

The Record ·

DOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018

The Brief · written from 7 sources

  • Operation Endgame, an international police operation, took down servers behind the Gootloader, CastleRAT and StealC malware tools.
  • Investigators seized 235 servers and 257 domains, and about 6.4 million stolen logins.
  • The U.S. Department of Justice says Gootloader was used in at least 44 ransomware attacks costing $29 million since 2018.

Why it matters

These malware families were used to gain access to computers, steal passwords and launch ransomware, so credentials and systems they touched may still need review even after the servers were taken down.

Who’s affected

  • Organizations whose endpoints may have been infected by Gootloader, CastleRAT or StealC
  • Developers and admins whose credentials may have been stolen by these tools

In a briefing adjacent to European announcements about an international anti-malware operation, U.S. officials detailed the history and impact of the Gootloader ransomware.

Timeline

  1. Help Net Security

    Operation Endgame malware takedown turns up over 6 million stolen logins

  2. BleepingComputer

    Police dismantle Gootloader, CastleRAT, StealC malware infrastructure

  3. CyberScoop

    International operation dismantles malware networks, exposes 6.4 million stolen credentials

  4. Law enforcement disruption of Gootloader, CastleRAT and StealC infrastructure announced

  5. SecurityWeek

    Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure

  6. The Hacker News

    Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins

  7. Security Affairs

    Gootloader Malware Disrupted After Infecting 25,000 Computers

  8. The Record from Recorded Future News

    DOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018

Full coverage · 7 sources

How do you feel about this?

0 Comments