Large-Scale Sting Tied to Operation Endgame Disrupts Ransomware Infrastructure
- Law enforcement agencies coordinated Operation Endgame between May 19 and 22, 2025, dismantling ransomware infrastructure globally.
- This action followed a sustained campaign targeting initial access brokers who supply ransomware operators with network entry points.
- The operation removed about 300 servers and neutralized 650 domains connected to malware strains like Qakbot, DanaBot, and Trickbot.
- Europol highlighted seizing over €3.5 million in cryptocurrency this week, bringing total Operation Endgame seizures above €21.2 million.
- Authorities issued nearly 20 international arrest warrants and foresee this disruption could hinder cybercriminals’ ability to launch further ransomware attacks.
29 Articles
29 Articles
During the operation, the most influential malware variants were removed from the network and the perpetrators were identified.
Large-scale sting tied to Operation Endgame disrupts ransomware infrastructure
Law enforcement agencies from Europe and North America have dismantled key infrastructure behind several leading malware strains used in ransomware attacks, the latest action in a yearslong effort to combat cybercriminals. The operation, conducted as part of Operation Endgame, targeted the early stages of the cybercrime chain, focusing on initial access malware. The coordinated effort resulted in the takedown of approximately 300 servers and th…
Operation Endgame 2.0, conducted this week by Europol and Eurojust, targets software as a gateway to ransomware, and the European authorities hope to cut off the momentum of criminal networks that cause multiple cyberattacks.
The purpose of Operation Endgame is to neutralize a type of software used to insert other malware into a target system.
Operation Endgame: EU, US authorities dismantle global malware network, taking down 300 servers and charging 20 suspects
PARIS, May 23 — European, American and Canadian authorities have taken down over 300 servers worldwide and issued international arrest warrants against 20 suspects in a crackdown on malware, EU agency for criminal justice cooperation Eurojust said in a statement, the latest phase in Operation Endgame. By the numbers German, French, Dutch, Danish, British, American and Canadian authorities joined forces this week against the world’s most dangerou…
In May 2024, the Federal Criminal Office (BKA) and its international partners struck a blow with Operation Endgame against cybercrime. Now the investigators initiated the second phase and from 19 to 22 May 2025 removed the most influential malware variants from the network and identified the culprits behind them. According to the BKA, the majority of the cases involved
Coverage Details
Bias Distribution
- 40% of the sources lean Left, 40% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium