Police seize servers used by Gootloader, CastleRAT and StealC
Original title: Police dismantle Gootloader, CastleRAT, StealC malware infrastructure
Europol and partners in nine countries took down hundreds of servers and domains under Operation Endgame.
Europol and law enforcement partners from nine countries seized hundreds of servers and domains used by the Gootloader, CastleRAT and StealC malware operations, BleepingComputer’s Sergiu Gatlan reports. Gootloader is a loader active since 2020, StealC steals credentials, cryptocurrency wallets and other data, and CastleRAT is a remote access trojan that appeared last year. The families have been used by various cybercriminal operations, including ransomware gangs. The seizures are part of Operation Endgame, which targets cybercrime-as-a-service networks.
Unconfirmed: The account relies on BleepingComputer; participating countries are not named.
- Hundreds of servers and domains were seized.
- Gootloader has been active since 2020.
- StealC targets credentials and cryptocurrency wallets.
- CastleRAT surfaced last year as a remote access trojan.
- Ransomware gangs are among the operations that used the three families.
Impact: Credential, wallet and sensitive-data theft via loader, stealer and RAT infrastructure.
- Malware
- GootloaderCastleRATStealC
- Organizations
- Europol
From the original article
2 min read at databreaches.netSergiu Gatlan reports: Europol and law enforcement partners from nine countries have seized hundreds of servers and domains used by the Gootloader, CastleRAT, and StealC malware operations. Gootloader is a malware loader active since 2020, StealC is an infostealer that helps exfiltrate credentials, cryptocurrency wallets, and other sensitive information from victims’ devices, and CastleRAT is...
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.