Europol freezes $47M in crypto in global cybercrime raid

Europol's Operation Endgame froze €41M ($47M) in crypto, dismantled three major malware networks, took down 326 servers, and recovered 27M stolen credentials in a global crackdown.

A global law enforcement initiative, Operation Endgame, led by Europol and supported by agencies from multiple countries, has frozen over €41 million (approximately $47 million) in cryptocurrency linked to cybercrime. This two-week operation dismantled the infrastructure behind three major malware families—SocGholish, Amadey, and StealC—responsible for stealing passwords and crypto wallet data, which enabled fraud, account takeovers, and ransomware attacks. Authorities successfully took down 326 servers and 142 domains, and cleaned up nearly 15,000 infected websites, most of which were compromised WordPress sites used to spread malware. The operation also led to the recovery of approximately 27 million stolen credentials from more than 385,000 infected systems. By targeting the backbone of the "cybercrime-as-a-service" ecosystem, Operation Endgame disrupted the tools and networks that facilitate large-scale cyber intrusions and financial theft, marking a significant blow to global cybercriminal operations.