www.helpnetsecurity.com • 5h
International Operation Endgame Disrupts Gootloader Malware Infrastructure
International law enforcement under Operation Endgame disrupted Gootloader, CastleRAT, and StealC malware infrastructure, seizing 235 servers and 257 domains used for distribution and command-and-control. Gootloader acted as an initial-access loader enabling credential theft and ransomware deployment. Authorities secured 6.4 million victim datasets and stolen logins affecting over 40,000 victims across 25,000 infected computers. U.S. authorities remediated over 100 servers and issued global victim notifications, degrading the cybercriminal ecosystem.