SecurityFan score 6 · Tier D3 sources
Police dismantle Gootloader, CastleRAT, StealC malware infrastructure
BleepingComputer · By Sergiu Gatlan ·
The Brief · written from 3 sources
- Police in nine countries, working with Europol, took down infrastructure behind the Gootloader, CastleRAT and StealC malware operations.
- Sources report 235 servers and 257 domains seized, and more than 6 million credentials recovered from infected computers (CyberScoop cites 6.4 million victims).
- The action was announced as part of the latest round of Operation Endgame.
Why it matters
Credentials stolen by these malware families were used for ransomware attacks and data theft, so developers should consider whether accounts or systems they use may have been exposed through infected machines.
Who’s affected
- Users of computers infected by Gootloader, CastleRAT or StealC
- #malware
- #law-enforcement
- #europol
- #credential-theft
- #takedown
Europol and law enforcement partners from nine countries have seized hundreds of servers and domains used by the Gootloader, CastleRAT, and StealC malware operations. [...]
Timeline
Europol announces takedown of Gootloader, CastleRAT and StealC infrastructure
Help Net Security
Operation Endgame malware takedown turns up over 6 million stolen logins
BleepingComputer
Police dismantle Gootloader, CastleRAT, StealC malware infrastructure
CyberScoop
International operation dismantles malware networks, exposes 6.4 million stolen credentials
Full coverage · 3 sources
- 1h ago ↗
CyberScoop
International operation dismantles malware networks, exposes 6.4 million stolen credentials - 3h ago ↗
BleepingComputer
Police dismantle Gootloader, CastleRAT, StealC malware infrastructure
- 4h ago ↗