CERT24Europol-led Operation Endgame disrupts StealC and Amadey malware infrastructureLoading data…
CERT24Threat Observatory
Period

Europol-led Operation Endgame disrupts StealC and Amadey malware infrastructure

An international law-enforcement takedown disrupted the infrastructure of the StealC and Amadey information stealers. The operation seized around 50 domains and nearly 200 active IP-based command-and-control servers. Microsoft reported more than 18,000 victim computers, while its collected intelligence linked StealC and Amadey to more than 140,000 infected computers worldwide during the first two weeks of May 2026.

← Back to intelligence

Europol-led Operation Endgame disrupts StealC and Amadey malware infrastructure

An international law-enforcement takedown disrupted the infrastructure of the StealC and Amadey information stealers. The operation seized around 50 domains and nearly 200 active IP-based command-and-control servers. Microsoft reported more than 18,000 victim computers, while its collected intelligence linked StealC and Amadey to more than 140,000 infected computers worldwide during the first two weeks of May 2026.