International operation dismantles malware networks, exposes 6.4 million stolen credentials

The Brief · written from 3 sources

Police in nine countries, working with Europol, took down infrastructure behind the Gootloader, CastleRAT and StealC malware operations.
Sources report 235 servers and 257 domains seized, and more than 6 million credentials recovered from infected computers (CyberScoop cites 6.4 million victims).
The action was announced as part of the latest round of Operation Endgame.

Why it matters

Credentials stolen by these malware families were used for ransomware attacks and data theft, so developers should consider whether accounts or systems they use may have been exposed through infected machines.

Who’s affected

Users of computers infected by Gootloader, CastleRAT or StealC

#malware
#law-enforcement
#europol
#credential-theft
#takedown

Police in nine countries have dismantled large parts of the criminal infrastructure behind three malware kits that enabled ransomware attacks and data theft, seizing 235 servers and 257 domains and identifying credentials belonging to 6.4 million victims, Europol announced…

Read the full story at cyberscoop.com ↗