{"id":357591,"date":"2026-06-28T10:28:00","date_gmt":"2026-06-28T04:58:00","guid":{"rendered":"https:\/\/ebiztoday.news\/?p=357591"},"modified":"2026-06-28T10:28:00","modified_gmt":"2026-06-28T04:58:00","slug":"one-two-punch-delivered-in-global-operation-disrupts-cybercrime-assembly-line","status":"publish","type":"post","link":"https:\/\/ebiztoday.news\/index.php\/2026\/06\/28\/one-two-punch-delivered-in-global-operation-disrupts-cybercrime-assembly-line\/","title":{"rendered":"One-two punch delivered in global operation disrupts cybercrime “assembly line”"},"content":{"rendered":"
\n

With evidence that the tools had overlapping infrastructure, company attorneys invoked RICO<\/a> statutes that focus on organized crime; the legal motion was then capable of treat each tools as a part of a single conspiracy. In consequence, Microsoft said, it disrupted greater than 200 command-and-control servers and severed criminal control of greater than 18,000 infected computers. Europol, which helped coordinate the law-enforcement a part of the operation, said<\/a> it recovered as many as 27 million stolen login credentials and uncovered $47 million value of \u201ccrypto assets of criminal origin.\u201d<\/p>\n

\u201cDuring this motion, 326 servers and 142 domains were actioned by law enforcement and the private sector partners, severely crippling the malware\u2019s distribution network,\u201d Europol said. \u201cBy taking down these tools concurrently, the collaboration between law enforcement and personal parties has increased friction for cybercriminals, making it harder for attacks to succeed, spread, or recuperate.\u201d<\/p>\n

Other corporations assisting in \u201cOperation Endgame\u201d include ESET<\/a>, Proofpoint and IBM X-Force<\/a>, Bitsight<\/a>, and Mitsui Bussan Secure Directions<\/a>.<\/p>\n

Europol said that one other tool disrupted in Operation Endgame is SocGholish, a malware loader linked to the Russian cybercrime group Evil Corp. that spreads through compromised web sites. Visitors to those sites are tricked into installing trojanized apps posing as browser extensions or other legitimate software. Europol said it has responded by cleansing infected WordPress sites and urging administrators of the sites to alter credentials and tighten security. It has also worked to notify parties whose data and credentials were exposed through SocGholish activities. Countries involved within the enforcement motion include Canada, Denmark, Germany, the Netherlands, the UK, and the US.<\/p>\n<\/p><\/div>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

With evidence that the tools had overlapping infrastructure, company attorneys invoked RICO statutes that focus on organized crime; the legal motion was then capable of treat each tools as a part of a single conspiracy. In consequence, Microsoft said, it disrupted greater than 200 command-and-control servers and severed criminal control of greater than 18,000 infected […]<\/p>\n","protected":false},"author":1,"featured_media":357592,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[5669,35524,17697,13254,3430,1028,53271,15671,4872],"class_list":["post-357591","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-assembly","tag-cybercrime","tag-delivered","tag-disrupts","tag-global","tag-line","tag-onetwo","tag-operation","tag-punch"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t