# Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure

Source: [SecurityWeek](https://www.securityweek.com/law-enforcement-disrupts-gootloader-castlerat-and-stealc-infrastructure/) · 2026-11-13 · Security
Page: https://themorning.dev/story/law-enforcement-disrupts-gootloader-castlerat-and-stealc-infrastructure-e4df5d0ce341c2b5
Kind: security · Impact: high

## In brief

- Operation Endgame law enforcement action disrupted Gootloader, CastleRAT and StealC infrastructure.
- Investigators seized 235 servers and 257 domains.
- Investigators also seized 6.4 million victim credentials.

## Why it matters

The takedown cuts off command infrastructure for these malware families, but credentials stolen by them may still be in use, so developers should assume exposed accounts could be abused.

## Coverage

- [Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure](https://www.securityweek.com/law-enforcement-disrupts-gootloader-castlerat-and-stealc-infrastructure/) — SecurityWeek, 2026-11-13

Tags: malware, law-enforcement, infostealer, operation-endgame, ransomware

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev