Following the massive botnet takedown codenamed Operation Endgame in May 2024, which shut down the biggest malware droppers, including IcedID, SystemBC, Pikabot, Smokeloader and Bumblebee, law enforcement agencies across North America and Europe dealt another blow to the malware ecosystem in early 2025.
In a coordinated series of actions, customers of the Smokeloader pay-per-install botnet, operated by the actor known as ‘Superstar’, faced consequences such as arrests, house searches, arrest warrants or ‘knock and talks’. Superstar used his botnet to run a pay-per-install service, enabling customers to gain access to victims’ machines. Customers used the service to deploy malware for their own criminal activities. Investigations revealed that botnet access was purchased for a range of purposes, including keylogging, webcam access, ransomware deployment, cryptomining and more.
Read more…
Source: Europol
Sign up for our Newsletter
The latest news and insights delivered right to your inbox.
Related:
- UN Cybercrime Treaty wins dozens of signatories, to go with its many critics
October 27, 2025
The United Nations on Saturday staged a signing ceremony for the Convention against Cybercrime, the world’s first agreement to combat online crime. And while 72 nations picked up the pen, critics continue to point out the convention’s flaws. Read more… Source: The Register News Sign up for the Cyber Security Review Newsletter The latest cyber security news and insights ...
- Trump pardons Binance founder Changpeng Zhao
October 23, 2025
President Donald Trump has pardoned Binance founder Changpeng Zhao, who pleaded guilty to a money laundering charge in 2023, the White House said Thursday. White House press secretary Karoline Leavitt said in a statement that Trump “exercised his constitutional authority by issuing a pardon for Mr. Zhao, who was prosecuted by the Biden Administration in their ...
- Europol: 7 arrested in Cybercrime-as-a-Service takedown
October 17, 2025
An action day performed in Latvia on 10 October 2025 led to the arrest of five cybercriminals of Latvian nationality and the seizure of infrastructure used to enable crimes against thousands of victims across Europe. During the operation codenamed ‘SIMCARTEL’, law enforcement arrested two further suspects, took down five servers and seized 1 200 SIM box ...
- UK: Two teenagers arrested over cyber-attack on nursery chain
October 7, 2025
Two 17-year-old boys have been arrested by police investigating a cyber-attack on a chain of nurseries in London. The Metropolitan Police say the pair were arrested at residential addresses in Bishop’s Stortford, Hertfordshire, on suspicion of computer misuse and blackmail. Hackers were said to have stolen the photographs, names and addresses of about 8,000 children from ...
- French prosecutors probe Apple’s Siri following complaint
October 6, 2025
French prosecutors said on Monday they are investigating tech giant Apple’s, opens new tab voice assistant Siri after receiving a complaint from a tech researcher accusing the company of illicit data collection. The probe, which was first reported by the news website Politico, has been entrusted to a police force specialised in cybercrime, the prosecutors’ office ...
- UK government tries again to access encrypted Apple customer data
October 1, 2025
The U.K. government is still trying to gain access to encrypted iCloud data, according to the Financial Times, after British officials allegedly filed a new secret order demanding Apple build a backdoor. On Wednesday, the British newspaper reported that the U.K. Home Office sent an order to Apple earlier in September requesting that the tech giant ...