Operation Endgame disrupts SocGholish, Amadey, and StealC malware networks
Event Details
Europol’s Operation Endgame disrupted the infrastructure behind ransomware and malware like SocGholish, Amadey, and StealC in a multinational effort, including Eurojust. The takedown affected 326 servers and 142 domains, as well as recovering 27 million stolen credentials. ‘The main common goal was to disrupt the ‘assembly lines’ cybercriminals use to launch ransomware, financial fraud, and attacks on critical infrastructure,’ Europol stated. Private partners in the operation were listed as Microsoft, the Shadowserver Foundation, Registrar of Last Resort (RoLR), Proofpoint, IBM X-Force, Infoblox, NorthWave, Orange Cyberdefense, Bitdefender, Have I Been Pwned (HIBP), Spamhaus.
Date
24/06/2026
Institution
- Europol
Ransomware Group
- Other
Event Category
- Infrastructure takedown
Level of Cooperation
- International
Countries
🇨🇦 Canada, 🇩🇰 Denmark, 🇩🇪 Germany, 🇳🇱 Netherlands, 🇬🇧 United Kingdom, 🇺🇸 United States
