Global cyber strike disrupts SocGholish, Amadey, and StealC malware networks


Europol together with partners from across the globe today announces a landmark blow to cybercriminal networks as part of Operation Endgame, a sweeping international operation targeting the criminal infrastructure behind ransomware and malware like SocGholish, Amadey, and StealC. In coordinated actions over the past two weeks, key components of these malicious toolkits were dismantled as part of a public-private effort.

This included law enforcement from Canada, Denmark, Germany, the Netherlands, the United Kingdom, the United States, the US software company Microsoft and other private partners, with the international activity coordinated by Europol and Eurojust. The main common goal was to disrupt the “assembly lines” cybercriminals use to launch ransomware, financial fraud, and attacks on critical infrastructure.

Read more…
Source:  EUROPOL


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents

    October 28, 2026

    Personally identifiable information belonging to thousands of U.S. Department of Homeland Security employees has been published online after a hacker stole reams of data in a previously undisclosed breach at the government department earlier this year. The breach includes names, job titles, and work contact information, such as email addresses, cell phone numbers, and office locations, ...

  • France moves to suspend social media accounts promoting protest violence

    October 23, 2026

    Representatives from Google, Reddit and Discord also attended a meeting at the Prime Minister’s office on Wednesday, where an agreement was reached to improve the handling of potentially illegal content. Under the arrangements, a dedicated Interior Ministry team, working alongside the PHAROS online reporting service, will coordinate urgent alerts. Platforms have agreed to prioritise requests from the ...

  • FBI arrests OpenAI employee accused of planting hidden recording device in conference room

    October 13, 2026

    OpenAI said it has alerted the FBI after discovering that an employee allegedly planted a hidden recording device in one of the AI maker’s office executive conference rooms. The employee, named by federal prosecutors as Saudi national Abdulrahman Alfozan, was fired and arrested on October 9, about a week after OpenAI discovered the surveillance device. The company ...

  • Operation KillSwitch: Teenager suspected of leading KillSec ransomware group

    October 1, 2026

    On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access. The cybercrime group used the site to threaten organisations with the publication of stolen files unless they paid a ransom. The action was part of Operation KillSwitch, an international investigation led by German ...

  • Dutch police arrest ‘security researcher’ in ShinyHunters probe

    September 29, 2026

    Dutch police have arrested a 24-year-old man on suspicion of involvement with the prolific ShinyHunters cybercrime group. Cops announced the arrest on Monday night and said the Amsterdam resident would appear before judges at Rotterdam District Court today (Tuesday). Officers have not named the suspect. However, a company has identified a person they believe to be the ...

  • A former US Army soldier has been sentenced to 70 months in prison for hacking telecoms companies

    September 28, 2026

    A former US Army soldier has been sentenced to 70 months in prison for hacking telecoms companies, stealing sensitive records, and trying to extort more than $1 million from his victims. Cameron John Wagenius, 22, carried out the campaign while serving on active duty. He pleaded guilty in March 2025 to unlawfully transferring confidential phone records, ...