International
The Morning Dev

Only the news worth knowing

‹
 

Security · High impactFan score 48 · Tier B7 sources

Gootloader Malware Disrupted After Infecting 25,000 Computers

Security Affairs · By Pierluigi Paganini ·

The Brief · written from 7 sources

  • Operation Endgame, an international police operation, took down servers behind the Gootloader, CastleRAT and StealC malware tools.
  • Investigators seized 235 servers and 257 domains, and about 6.4 million stolen logins.
  • The U.S. Department of Justice says Gootloader was used in at least 44 ransomware attacks costing $29 million since 2018.

Why it matters

These malware families were used to gain access to computers, steal passwords and launch ransomware, so credentials and systems they touched may still need review even after the servers were taken down.

Who’s affected

  • Organizations whose endpoints may have been infected by Gootloader, CastleRAT or StealC
  • Developers and admins whose credentials may have been stolen by these tools

International law enforcement disrupts Gootloader, seizing domains and taking down over 100 servers linked to 25,000 infected computers. The U.S. Department of Justice announced that law enforcement has removed Gootloader malware from more than 100 computer servers, seized U.S…

Timeline

  1. Help Net Security

    Operation Endgame malware takedown turns up over 6 million stolen logins

  2. BleepingComputer

    Police dismantle Gootloader, CastleRAT, StealC malware infrastructure

  3. CyberScoop

    International operation dismantles malware networks, exposes 6.4 million stolen credentials

  4. Law enforcement disruption of Gootloader, CastleRAT and StealC infrastructure announced

  5. SecurityWeek

    Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure

  6. The Hacker News

    Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins

  7. Security Affairs

    Gootloader Malware Disrupted After Infecting 25,000 Computers

  8. The Record from Recorded Future News

    DOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018

Full coverage · 7 sources

How do you feel about this?

0 Comments