Operation Endgame 3.0 Dismantles Malware Networks

International law enforcement agencies dismantled a vast cybercrime infrastructure on November 10 to 13, 2025, targeting three major malware operations that infected hundreds of thousands of computers worldwide and stole millions of credentials from unaware victims.

The coordinated effort, known as Operation Endgame 3.0 and led by Europol from its headquarters in The Hague, Netherlands, involved authorities from Australia, Belgium, Canada, Denmark, France, Germany, Greece, Lithuania, the Netherlands, the United Kingdom, and the United States. Eurojust provided judicial support, while more than 30 private cybersecurity firms, including Crowdstrike, Proofpoint, Bitdefender, and the Shadowserver Foundation, contributed technical expertise and analysis. The operation focused on the Rhadamanthys infostealer, the VenomRAT remote access trojan, and the Elysium botnet, tools authorities described as key enablers of global cybercrime, including ransomware attacks.

A key development occurred earlier, on November 3, when Greek police in Athens arrested a 38-year-old Albanian national suspected of creating and selling VenomRAT since 2020. The suspect, detained on a European arrest warrant...