Microsoft and Europol have dismantled infrastructure supporting Amadey and StealC malware operations in Operation Endgame, a coordinated action targeting cybercriminal services and ransomware gangs.
The operation marks a significant enforcement action against two prolific malware families responsible for credential theft and data exfiltration across enterprises and consumers.
Amadey, a longstanding stealer malware, has infected hundreds of thousands of machines globally since its emergence. StealC, a newer competitor in the malware-as-a-service space, rapidly gained adoption among cybercriminals seeking to harvest login credentials and sensitive information.
Operation Endgame represents an escalating international effort to disrupt cybercriminal infrastructure. Microsoft and Europol coordinated with law enforcement agencies across multiple jurisdictions to target the command-and-control servers, hosting providers, and financial networks supporting these operations.
The action involved takedowns of malware distribution channels and disruption of criminal backend infrastructure. Authorities seized control of key systems and redirected traffic to prevent ongoing malware propagation.
Both malware families remain threats. The operation aims to raise operational costs for criminals and disrupt active campaigns, though threat actors typically migrate to alternative infrastructure.
Researchers argue that watermarking systems designed to identify AI-generated text cannot provide meaningful protection due to inherent vulnerabilities in text-based detection methods.
Surveillance company Flock is requiring all customers to use a new tool called "Audit Assistance" to identify police abuse, claiming it has already caught misconduct. The company has not disclosed how the tool operates.
The Trump administration has authorized private security companies to launch cyberattacks against foreign cybercriminals under federal oversight. The presidential memorandum marks the first time the US government has formally permitted the private sector to conduct offensive cyber operations.
Flock Security is implementing new controls on its automated license plate reader cameras to prevent law enforcement from accessing data beyond their jurisdiction or legal authority. The safety features aim to address privacy concerns surrounding the company's widespread camera network.