Finance
EU, US authorities take down malware network
Published by Global Banking & Finance Review®
Posted on May 23, 2025
2 min readLast updated: January 23, 2026
Global Banking & Finance Review®
Company
Published by Global Banking & Finance Review®
Posted on May 23, 2025
2 min readLast updated: January 23, 2026
EU and US authorities dismantled a global malware network, seizing over 300 servers and issuing 20 arrest warrants. Operation Endgame continues with further actions planned.
PARIS (Reuters) -European, American and Canadian authorities have taken down over 300 servers worldwide and issued international arrest warrants against 20 suspects in a crackdown on malware, EU agency for criminal justice cooperation Eurojust said in a statement, the latest phase in Operation Endgame.
BY THE NUMBERS
German, French, Dutch, Danish, British, American and Canadian authorities joined forces this week against the world's most dangerous malware variants and the perpetrators behind them.
More than three dozen suspects were identified and 20 individuals criminally charged. Over 300 servers worldwide were taken down, 650 domains were neutralised and 3.5 million euros in cryptocurrency were seized.
The actions follow efforts in May 2024, which had been the largest-ever operation against botnets.
In total, 21.2 million euros have been seized during the an operation started in 2024.
CONTEXT
The malware taken down this week is known as "initial access malware." It is used for initial infection, helping cybercriminals to enter victims' systems unnoticed and load more malware onto their devices, such as ransomware.
WHAT'S NEXT
Operation Endgame will continue with follow-up actions announced on the dedicated website from the international coalition.
Several key suspects behind the malware operations are subject to international and public appeals. The German authorities will include eighteen of them on the EU Most Wanted list on Friday.
(Reporting by GV De Clercq)
German, French, Dutch, Danish, British, American, and Canadian authorities joined forces in this operation.
Over 300 servers worldwide were taken down as part of the crackdown on malware.
The malware targeted in this operation is known as 'initial access malware,' which helps cybercriminals infiltrate victims' systems.
A total of 21.2 million euros in cryptocurrency have been seized during the operation that started in 2024.
Operation Endgame will continue, with follow-up actions announced on the dedicated website from the international coalition.
Explore more articles in the Finance category
