Luxembourg State Workstations Targeted by Socgholish, Amadey, and StealC Malware
Luxembourg state workstations were targeted by a coordinated cyber-espionage campaign timed with the nation's National Day. Attackers utilized spear-phishing emails to deploy Socgholish (FakeUpdates) as an initial access broker, which subsequently loaded Amadey for persistence and StealC for credential exfiltration. The infection chain focused on harvesting administrative credentials and government metadata from public sector infrastructure. The campaign was neutralized through a global disruption operation led by Europol in collaboration with GovCERT.lu, CIRCL, and CERT-EU, resulting in the dismantling of the Amadey and StealC command-and-control (C2) infrastructure.
Europol Disruption of AudiA6 Crypto Laundering Infrastructure
Europol, in coordination with the Australian Federal Police (AFP) and Chainalysis, dismantled AudiA6, a specialized "Crypto-as-a-Service" laundering network used by Ransomware-as-a-Service (RaaS) syndicates. The operation disrupted the movement of approximately $389 million (€336 million) in illicit assets. AudiA6 utilized sophisticated blockchain obfuscation techniques, including peel chains, chain-hopping, and mixing, to mask the origin of funds from groups such as LockBit and ALPHV/BlackCat. By neutralizing this centralized financial pipeline, law enforcement has significantly reduced the liquidity and operational capacity of multiple high-profile ransomware gangs, targeting the critical intersection of theft and monetization.
Operation KRATOS 2: Dismantling Global Illegal Streaming Infrastructure
Operation KRATOS 2, a seven-month coordinated effort led by Bulgarian authorities and supported by Europol, disrupted the digital infrastructure of nine organized crime groups facilitating unauthorized access to premium sports and media broadcasts. The operation targeted content delivery mechanisms and monetization gateways used to generate millions in illicit revenue. Law enforcement successfully neutralized over 27,000 illegal streaming URLs, disrupting the operational architecture of these networks and arresting 29 individuals. This action highlights the convergence of large-scale copyright infringement and organized crime, where illicit streaming serves as a high-revenue vector for sophisticated criminal enterprises.