Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins

An international police operation took down servers behind Gootloader, CastleRAT and StealC this week. Criminals used the three malware tools to gain access to computers, steal passwords, and launch ransomware attacks. Police also seized about 6.4 million stolen logins belonging to more than 40,000 victims, according to Germany's Federal Criminal Police Office (BKA). Gootloader is a loader:

بدافزار و آلودگی باج‌افزار
خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
The Hacker News

When an AI Agent Goes Wrong, Can You Stop It?

Suppose an AI agent is asked to sort support tickets and look up account details. A ticket contains instructions that lead the agent to export records to an unfamiliar destination. The agent can make the request because its identity has access to the records and its connected tools allow the action. That kind of scenario raises a response question: what does “stop the agent” actually mean? A

SOCRadar

FaceStealer: FBI Disrupts Fake Video Call Crypto Scam

The FBI and the U.S. Department of Justice have disrupted FaceStealer, a North Korean social engineering campaign that used hijacked accounts, replayed webcam footage and fake video calls to steal more than $400 million in cryptocurrency over the past 18 months. The DOJ announced on November 12, 2026, that it had seized cloud-based infrastructure behind […]

The Hacker News

SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users

A newly identified spying group used hacked equipment inside Asian mobile operators to intercept the calls and texts of selected people, mostly in Taiwan. Enea, a telecom and cybersecurity software company based in Stockholm, found the group's attack sources in at least six Asian countries and named it SilentAir this week. It assessed with high confidence that SilentAir is a state-level actor,

SOCRadar

XaocMail ClickFix Campaign Drops Phantom53 and HavoX Across Latin America, Asia, and Europe

Threat actors continue to refine and scale their operations, increasingly integrating artificial intelligence to harden attack infrastructure and accelerate deployment. The SOCRadar Threat Research Unit (STRU) recently identified a multi-stage campaign operated by a Russian-speaking threat actor wielding an AI-assisted toolkit. The adversary’s pipeline chains XaocMail (translated as ChaosMail), a phishing platform de…