Find notable cyber news and cases, enriched with sources, timelines, and signals.

Operation Endgame takedown of Rhadamanthys, VenomRAT, and Elysium

Law Enforcement
First reported
Last updated
Happening score
H score 57
2 unique sources, 2 articles

Summary

Hide ▲

Law enforcement from nine countries seized domains and took down over 1,000 servers tied to Rhadamanthys, VenomRAT, and Elysium, disrupting a major cybercrime infrastructure network. The coordinated action under Operation Endgame also exposed a key suspect linked to VenomRAT. Europol said the dismantled infrastructure held several million stolen credentials and access to over 100,000 crypto wallets. The case shows how multinational policing can rapidly collapse malware supply chains at scale.

Related Happenings

StealC and Amadey infostealer infrastructure disruption

Malware Activity
H score69 First: 24.06.2026 18:25 Last: 24.06.2026 18:25 Sources 1

About this happening: **StealC** and **Amadey** malware infrastructure was disrupted in **Operation Endgame**, cutting off the command-and-control services used to manage infected systems. Europol said...

Operation Endgame takedown of Amadey and StealC infrastructure

Law Enforcement
H score66 First: 24.06.2026 18:02 Last: 24.06.2026 18:02 Sources 1

About this happening: An **international law-enforcement takedown** under **Operation Endgame** disrupted shared infrastructure used by **Amadey** and **StealC**, with **Microsoft**, **Europol**, and i...

Operation Endgame international cybercrime disruption initiative

Public Sector Action
H score57 First: 19.06.2026 18:07 Last: 19.06.2026 18:07 Sources 1

About this happening: **Operation Endgame** is an **ongoing international law enforcement initiative** that now includes the takedown of **SocGholish** infrastructure, expanding disruption of botnets a...

Operation Endgame takedown of SocGholish and Evil Corp infrastructure

Law Enforcement
H score58 First: 18.06.2026 16:25 Last: 18.06.2026 16:25 Sources 1

About this happening: **International law enforcement** disrupted **SocGholish/FakeUpdates** infrastructure in **Operation Endgame** on **June 18**, cleaning **14,971 compromised WordPress websites** a...

Europol-led AudiA6 crypto-laundering takedown

Law Enforcement
H score29 First: 11.06.2026 18:55 Last: 11.06.2026 18:55 Sources 1

About this happening: **Law enforcement** dismantled **AudiA6**, a **cryptocurrency laundering service** used by **ransomware gangs** and other cybercriminal networks, in a **June 10, 2026** multinatio...

Timeline

  1. 13.11.2025 12:53 1 articles · 7mo ago

    Greece arrests VenomRAT-linked suspect

    Legal Policy Action Update

    Law enforcement authorities in Greece arrested a key suspect linked to the VenomRAT remote access trojan on November 3, 2025 as part of Operation Endgame, adding a criminal case against the malware infrastructure targeted in the multinational action.

    Show sources
  2. 13.11.2025 12:53 2 articles · 7mo ago

    Operation Endgame disrupts Rhadamanthys, VenomRAT, and Elysium infrastructure

    Legal Policy Action Update

    Law enforcement authorities from nine countries, coordinated by Europol and Eurojust and supported by private partners, disrupted Rhadamanthys, VenomRAT, and Elysium botnet infrastructure by taking down over 1,000 servers, seizing 20 domains, and conducting searches at 11 locations in Germany, Greece, and the Netherlands. Europol said the dismantled malware infrastructure contained hundreds of thousands of infected computers, several million stolen credentials, and access to over 100 000 crypto wallets.

    Show sources