Gootloader

Mentions · 7d7
Mentions · 30d7
All mentions7
First seenNov 12, 2026
Last mentioned7h ago

Timeline

7 articles · newest first

Weekly threats: kernel bugs, Falcon spyware, GSocket, Europol seizures

Microsoft reports working root exploits for eight kernel CVEs, including CVE-2026-64563, while Europol seized 235 servers.

The Hacker NewsNov 12, 18:02 UTC · 7h agoMalwareCVE-2026-645631

Europol takes down 235 servers linked to Gootloader, CastleRAT and StealC

The Operation Endgame action recovered 6.4 million victim datasets and cleaned 681 websites used to deliver Gootloader.

Cyber Security NewsNov 12, 16:58 UTC · 8h agoMalware 6 sources

Operation Endgame dismantles CastleRAT, Gootloader and StealC networks

Authorities seized 235 servers and 257 domains and identified credentials for 6.4 million victims.

CyberScoopNov 12, 16:55 UTC · 8h agoMalware 6 sources1

European police dismantle StealC servers for a second time

The wider action disrupted 235 servers and 257 domains and recovered copies of about 6.4 million stolen logins.

The Recordupdated Nov 12, 16:58 UTC · 8h agofirst Nov 12, 16:21 UTC · 8h agoMalware 6 sources

Police seize servers used by Gootloader, CastleRAT and StealC

Europol and partners in nine countries took down hundreds of servers and domains under Operation Endgame.

DataBreaches.netupdated Nov 12, 16:58 UTC · 8h agofirst Nov 12, 15:45 UTC · 9h agoMalware 6 sources1

Police seize Gootloader, CastleRAT and StealC servers and domains

Authorities seized 257 domains and 235 servers and found more than 6 million stolen credentials.

BleepingComputerupdated Nov 12, 16:58 UTC · 8h agofirst Nov 12, 15:07 UTC · 9h agoMalware 6 sources

Operation Endgame seizes Gootloader, CastleRAT and StealC servers

Police in nine countries and Europol seized 235 servers and 257 domains and recovered more than 6 million stolen logins.

Help Net Securityupdated Nov 12, 16:58 UTC · 8h agofirst Nov 12, 13:34 UTC · 11h agoMalware 6 sources

Related CVEs

by mentions

CVE-2026-64563<1%7.8
Linux kernel: rhashtable: clear stale iter->p on table restart rhashtable_walk_start_check() has two restart paths when…
published Aug 4, 2026Linux kernel

Appears with

CastleRATmalware · 7
StealCmalware · 7
Europolorganization · 7
Eurojustorganization · 3
Have I Been Pwnedorganization · 2
WordPressproduct · 2
Palo Alto Networks Unit 42organization · 1
Shadowserver Foundationorganization · 1
Dutch National Cyber Security Centreorganization · 1
Microsoftorganization · 1
Linux kernelproduct · 1
Ellipticorganization · 1
Falconmalware · 1
Virtualineorganization · 1
Antinomalware · 1
Binancevictim · 1

Entities are extracted by the model from each article. First seen Nov 12, 2026, last mentioned 7h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.