# Police seize 235 servers supporting three malware operations

_Published Thursday, November 12, 2026 at 10:39 AM EST · Security, Policy · Latest · Tier 2 — Notable_

![Police seize 235 servers supporting three malware operations — Primary](https://www.bleepstatic.com/content/hl-images/2026/11/12/Operation-Endgame.jpg)

Europol and law enforcement partners from nine countries seized 257 domains and 235 servers used by Gootloader, CastleRAT and StealC in the latest phase of Operation Endgame. The malware supports activities including remote access, credential theft and ransomware attacks.

Authorities identified 6.4 million victim datasets on the criminal infrastructure, containing information stolen from infected systems for use in further attacks. Europol said victim data will be made available through services including HaveIBeenPwned and national security organizations to alert people whose credentials were stolen. WordPress users were urged to update credentials, enable multifactor authentication and patch vulnerabilities.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/police-dismantles-gootloader-castlerat-stealc-malware-infrastructure/)

---
Canonical: https://techandbusiness.org/newswire/uCBCYMcoQO-CQ-67518fSj
Published: 2026-11-12T15:39:56.783Z
Story chronology: 2026-11-12T15:07:20.000Z
Retrieved: 2026-11-12T17:35:44.444Z
Publisher: Tech & Business (techandbusiness.org)