Operation Endgame seizes Gootloader, CastleRAT and StealC infrastructure
Original title: Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins
Police seized 235 servers, 257 domains and about 6.4 million logins from more than 40,000 victims; no arrests were announced.
An international police action under Operation Endgame took down servers for Gootloader, CastleRAT and StealC. Germany's BKA said about 6.4 million stolen logins from more than 40,000 victims were seized. Europol reported 235 servers and 257 domains seized across the three tools, including 14 Gootloader servers, 218 domains and malware removal from 681 hacked websites. StealC had returned after a June disruption. Dutch police are still investigating Gootloader's main suspect.
Unconfirmed: German and US infection counts for Gootloader differ, and investigators say the German figure reflects what is known so far.
- The US Justice Department says Gootloader infected at least 25,000 computers since 2018.
- US ransomware cases tied to Gootloader include at least 44 victims and about $28.8 million in losses.
- CastleRAT: 120 servers and 39 domains seized.
- German police say Gootloader has infected millions of computers since 2020, a higher count than the US figure.
- Victims can check an email at the Dutch 'Check your hack' service; police never email links.
Impact: Stolen logins and access sold onward for ransomware
- 1.Check an email address at the Dutch Check your hack service.
- 2.Change WordPress administrator passwords, enable MFA, and remove unknown accounts and backdoors.
- 3.Update WordPress, themes and plugins, and restrict /wp-admin by IP.
From the original article
3 min read at thehackernews.com
An international police operation took down servers behind Gootloader, CastleRAT and StealC this week. Criminals used the three malware tools to gain access to computers, steal passwords, and launch ransomware attacks. Police also seized about 6.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.