Investigators seized 235 servers and 257 domains in the Operation Endgame crackdown, Europol says.
SecurityWeek reports that Gootloader, CastleRAT and StealC enabled ransomware attacks and data theft. Europol says the Operation Endgame crackdown also recovered 6.4 million victim credentials, shared with services including HaveIBeenPwned.
—
7 Sources, first seen ago
Counts from X are delayed. They’ll show here once X sends them.
Counts from X are delayed. They’ll show here once X sends them.
@BleepinComputerPolice dismantles Gootloader, CastleRAT, StealC malware infrastructure https://www.bleepingcomputer.com/news/security/police-dismantles-gootloader-castlerat-stealc-malware-infrastructure/ https://www.bleepingcomputer.com/news/security/police-dismantles-gootloader-castlerat-stealc-malware-infrastructure/
@fox35orlandoFederal authorities say they have successfully removed the "Gootloader" malware, blamed for ransomware attacks on at least 44 U.S.-based victims, from more than 100 computer servers and have seized U.S. domain names used in related cybercrimes. https://www.fox35orlando.com/news/malware-blamed-us-cyberattacks-removed-web-domains-seized-justice-department-says?taid=6af6dfa3d0eea100019ae011&utm_campaign=trueanthem&utm_medium=trueanthem&utm_source=twitter
@itsMikeKiprutoA compromised WordPress website can become part of a ransomware supply chain without its visitors knowing. Police have dismantled Gootloader, a malware operation that hijacked WordPress websites to manipulate search results and distribute malicious downloads. The international operation: - Seized 218 domains used by Gootloader. - Cleaned 681 compromised websites. - Disrupted CastleRAT and StealC infrastructure. - Secured more than 6.4 million stolen records. The operation involved nine countries, coordinated with Europol and Eurojust. For WordPress site owners, this is a reminder that security goes beyond protecting the login page. Keep WordPress, themes and plugins updated. Enforce MFA. Monitor unexpected file changes and injected content. Your website's reputation can be weaponized against its own visitors.@BleepinComputerPolice dismantles Gootloader, CastleRAT, StealC malware infrastructure https://www.bleepingcomputer.com/news/security/police-dismantles-gootloader-castlerat-stealc-malware-infrastructure/ https://www.bleepingcomputer.com/news/security/police-dismantles-gootloader-castlerat-stealc-malware-infrastructure/@fox35orlandoFederal authorities say they have successfully removed the "Gootloader" malware, blamed for ransomware attacks on at least 44 U.S.-based victims, from more than 100 computer servers and have seized U.S. domain names used in related cybercrimes. https://www.fox35orlando.com/news/malware-blamed-us-cyberattacks-removed-web-domains-seized-justice-department-says?taid=6af6dfa3d0eea100019ae011&utm_campaign=trueanthem&utm_medium=trueanthem&utm_source=twitter@itsMikeKiprutoA compromised WordPress website can become part of a ransomware supply chain without its visitors knowing. Police have dismantled Gootloader, a malware operation that hijacked WordPress websites to manipulate search results and distribute malicious downloads. The international operation: - Seized 218 domains used by Gootloader. - Cleaned 681 compromised websites. - Disrupted CastleRAT and StealC infrastructure. - Secured more than 6.4 million stolen records. The operation involved nine countries, coordinated with Europol and Eurojust. For WordPress site owners, this is a reminder that security goes beyond protecting the login page. Keep WordPress, themes and plugins updated. Enforce MFA. Monitor unexpected file changes and injected content. Your website's reputation can be weaponized against its own visitors.@BleepinComputerPolice dismantles Gootloader, CastleRAT, StealC malware infrastructure https://www.bleepingcomputer.com/news/security/police-dismantles-gootloader-castlerat-stealc-malware-infrastructure/ https://www.bleepingcomputer.com/news/security/police-dismantles-gootloader-castlerat-stealc-malware-infrastructure/@fox35orlandoFederal authorities say they have successfully removed the "Gootloader" malware, blamed for ransomware attacks on at least 44 U.S.-based victims, from more than 100 computer servers and have seized U.S. domain names used in related cybercrimes. https://www.fox35orlando.com/news/malware-blamed-us-cyberattacks-removed-web-domains-seized-justice-department-says?taid=6af6dfa3d0eea100019ae011&utm_campaign=trueanthem&utm_medium=trueanthem&utm_source=twitter@itsMikeKiprutoA compromised WordPress website can become part of a ransomware supply chain without its visitors knowing. Police have dismantled Gootloader, a malware operation that hijacked WordPress websites to manipulate search results and distribute malicious downloads. The international operation: - Seized 218 domains used by Gootloader. - Cleaned 681 compromised websites. - Disrupted CastleRAT and StealC infrastructure. - Secured more than 6.4 million stolen records. The operation involved nine countries, coordinated with Europol and Eurojust. For WordPress site owners, this is a reminder that security goes beyond protecting the login page. Keep WordPress, themes and plugins updated. Enforce MFA. Monitor unexpected file changes and injected content. Your website's reputation can be weaponized against its own visitors.@BleepinComputerPolice dismantles Gootloader, CastleRAT, StealC malware infrastructure https://www.bleepingcomputer.com/news/security/police-dismantles-gootloader-castlerat-stealc-malware-infrastructure/ https://www.bleepingcomputer.com/news/security/police-dismantles-gootloader-castlerat-stealc-malware-infrastructure/@fox35orlandoFederal authorities say they have successfully removed the "Gootloader" malware, blamed for ransomware attacks on at least 44 U.S.-based victims, from more than 100 computer servers and have seized U.S. domain names used in related cybercrimes. https://www.fox35orlando.com/news/malware-blamed-us-cyberattacks-removed-web-domains-seized-justice-department-says?taid=6af6dfa3d0eea100019ae011&utm_campaign=trueanthem&utm_medium=trueanthem&utm_source=twitter@itsMikeKiprutoA compromised WordPress website can become part of a ransomware supply chain without its visitors knowing. Police have dismantled Gootloader, a malware operation that hijacked WordPress websites to manipulate search results and distribute malicious downloads. The international operation: - Seized 218 domains used by Gootloader. - Cleaned 681 compromised websites. - Disrupted CastleRAT and StealC infrastructure. - Secured more than 6.4 million stolen records. The operation involved nine countries, coordinated with Europol and Eurojust. For WordPress site owners, this is a reminder that security goes beyond protecting the login page. Keep WordPress, themes and plugins updated. Enforce MFA. Monitor unexpected file changes and injected content. Your website's reputation can be weaponized against its own visitors.#6
#6
Comments