Europol: End of the game for cybercrime infrastructure: 1025 servers taken down


Between 10 and 13 November 2025, the latest phase of Operation Endgame was coordinated from Europol’s headquarters in The Hague. The actions targeted one of the biggest infostealers Rhadamanthys, the Remote Access Trojan VenomRAT, and the botnet Elysium, all of which played a key role in international cybercrime.

Authorities took down these three large cybercrime enablers. The main suspect for VenomRAT was also arrested in Greece on 3 November 2025. The infrastructure dismantled during the action days was responsible for infecting hundreds of thousands of victims worldwide with malware. Operation Endgame, coordinated by Europol and Eurojust, is a joint effort between law enforcement and judicial authorities of Australia, Belgium, Canada, Denmark, France, Germany, Greece, Lithuania, the Netherlands, the United Kingdom and the United States to tackle ransomware enablers.

Read more…
Source: Europol


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Pakistan: FIA files cyberterrorism case against suspect for allegedly sharing fake news that incited UK riots

    August 21, 2024

    The Federal Investigation Agency (FIA) has arrested and booked a Lahore resident for allegedly sharing fake information that incited the recent riots across the UK, it emerged on Wednesday. More than a week after the kingdom witnessed widespread riots in the aftermath of the fatal stabbing of three young girls in Southport, law enforcement agencies began ...

  • UK to conduct review on tackling ‘extremist ideologies’, including misogyny

    August 18, 2024

    UK Home Secretary Yvette Cooper has ordered a review of the United Kingdom’s counterterrorism strategy on how to best tackle threats by “extremist ideologies” including misogyny. Other ideological trends to be investigated by the Home Office include “Islamism” and far-right “extremism”. Cooper said the strategy will “map and monitor extremist trends” and gauge how to direct ...

  • UK: Man charged with encouraging terrorism appears in court

    August 16, 2024

    A man described in court as a “political activist” has appeared at the Old Bailey charged with encouraging terrorism over social media posts relating to the Charlie Hebdo attack. Majid Novsarka, otherwise known as Majid Freeman, attended the London court on Friday charged with encouragement of terrorism and supporting the proscribed organisation Hamas. It is alleged ...

  • ‘Keyboard warrior’ jailed for part in UK disorder

    August 16, 2024

    A man who posted material on social media to stir up racial hatred during recent unrest across the UK has been jailed for three years. Wayne O’Rourke, who had more than 90,000 followers to his X account, posted misinformation about the killing of three young girls in Southport on 29 July and praised the burning of ...

  • Turkish intelligence dismantles global cyber espionage network

    August 13, 2024

    The Turkish National Intelligence Organization (MIT) has successfully dismantled a global cyber espionage network that had stolen personal data from thousands of individuals worldwide, including in Türkiye. In a coordinated effort with the Turkish Gendarmerie General Command and the National Cyber Incident Response Center (USOM), MIT carried out the operation as part of an investigation led ...

  • FBI investigating attempts to hack Biden-Harris and Trump campaigns

    August 12, 2024

    Federal investigators are looking into whether Iranian hackers targeted individuals associated with the Trump and Biden-Harris campaigns, three people familiar with the investigation confirmed to CBS News. The FBI launched the probes in the early summer, after both presidential campaigns experienced attempted phishing schemes targeting people on the campaign, the sources said. Iran-backed cybercriminals are the ...