MalwarePublished 24 Jun 2026

Amadey, StealC malware operations disrupted in Operation Endgame action

Source Bleeping Computer

Description

Microsoft, Europol, and international partners have disrupted infrastructure used by the Amadey and StealC malware operations as part of Operation Endgame, which targets cybercriminal services and ransomware gangs. [...]

Impact

The disruption of Amadey and StealC infrastructure significantly hampers the ability of cybercriminals to conduct initial access, credential theft, and ransomware deployment. The takedown of hundreds of servers and domains, along with the seizure of substantial cryptocurrency and stolen credentials, reduces active infections and criminal operations. However, the threat actors behind these malware families may rebuild their infrastructure, meaning the threat persists. The operation reduces the scale and success of attacks relying on these malware families in the short term.

Defensive guidance

This disruption was achieved through coordinated law enforcement and private sector action involving domain seizures, server takedowns, and court orders. There is no direct patch or software fix since this is a malware infrastructure disruption. Organizations should continue to apply standard security practices to detect and prevent infections by Amadey, StealC, and related malware. Monitoring for indicators of compromise related to these malware families and applying threat intelligence updates from security vendors is recommended. The operation increases friction for attackers but does not eliminate the threat entirely.

References

bleepingcomputer.com/news/security/amadey-stealc-malware-operations-disrupted-in-operation-endgame-action/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 24 Jun 2026, 14:39 UTC

References

Community reviews