Security · High impactFan score 48 · Tier B7 sources
Gootloader Malware Disrupted After Infecting 25,000 Computers
Security Affairs · By Pierluigi Paganini ·
The Brief · written from 7 sources
- Operation Endgame, an international police operation, took down servers behind the Gootloader, CastleRAT and StealC malware tools.
- Investigators seized 235 servers and 257 domains, and about 6.4 million stolen logins.
- The U.S. Department of Justice says Gootloader was used in at least 44 ransomware attacks costing $29 million since 2018.
Why it matters
These malware families were used to gain access to computers, steal passwords and launch ransomware, so credentials and systems they touched may still need review even after the servers were taken down.
Who’s affected
- Organizations whose endpoints may have been infected by Gootloader, CastleRAT or StealC
- Developers and admins whose credentials may have been stolen by these tools
- #malware
- #ransomware
- #law-enforcement
- #takedown
- #infostealer
International law enforcement disrupts Gootloader, seizing domains and taking down over 100 servers linked to 25,000 infected computers. The U.S. Department of Justice announced that law enforcement has removed Gootloader malware from more than 100 computer servers, seized U.S…
Timeline
Full coverage · 7 sources
- 4h ago ↗
The Record from Recorded Future News
DOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018 - 5h ago ↗
Security Affairs
Gootloader Malware Disrupted After Infecting 25,000 Computers
- 9h ago ↗
The Hacker News
Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins - 9h ago ↗
- 1d ago ↗
CyberScoop
International operation dismantles malware networks, exposes 6.4 million stolen credentials - 1d ago ↗
- 1d ago ↗