Europol-coordinated takedown dismantles Amadey and StealC malware infrastructure, 27M credentials recovered
27 million stolen login credentials have been recovered in a Europol-coordinated takedown. With Microsoft $MSFT, ESET, Bitdefender and Bitsight, investigators dismantled the Amadey and StealC malware infrastructure: 326 servers and 142 domains down, $47M in crypto frozen. Source:
A coordinated international law enforcement operation has dismantled the infrastructure behind two of the most widely used infostealer malware families, Amadey and StealC, Europol announced. The two-week action was carried out with private-sector partners including Microsoft $MSFT, ESET, Bitdefender and Bitsight. Investigators took down 326 servers and 142 domains used to distribute the malware, and recovered around 27 million stolen login credentials. Cryptocurrency assets of criminal origin valued at more than $47 million were identified, flagged and restricted from use. Infostealers such as Amadey and StealC harvest passwords, session tokens and other data from infected machines and feed them to criminal markets. According to Europol, the networks functioned as assembly lines supplying the credentials and access used in ransomware campaigns, financial fraud and attacks on critical infrastructure. Source: Europol.