Operation Endgame Disrupts Amadey StealC Malware

An international law enforcement operation has disrupted the criminal infrastructure supporting two major malware families, Amadey and StealC, dealing a significant blow to the cybercrime supply chain. The coordinated action, part of the ongoing Operation Endgame, involved judicial authorities and police from Belgium, Canada, Denmark, France, Germany, the Netherlands, the United Kingdom, and the United States, working in partnership with private cybersecurity firms.

The operation, which took place between June 15 and 19, 2026, resulted in the takedown of 326 servers and the seizure of 142 domains used to distribute the malware. Authorities also identified and restricted cryptocurrency assets of criminal origin valued at more than 47 million dollars and recovered approximately 27 million stolen login credentials from over 385,000 compromised systems.

Europol stated the main goal was to disrupt the assembly lines cybercriminals use to launch ransomware, financial fraud, and attacks on critical infrastructure. Officials emphasized that by targeting the interconnected tools simultaneously, they have increased the operational difficulty for cybercriminals, making attacks harder to...