SocGholish

Europol's police action disrupted SocGholish, Amadey, and StealC malware that steal crypto wallets and passwords, freezing €41 million in cryptocurrency. The takedown targeted global infostealer operations.

Authorities disrupted Evil Corp’s SocGholish botnet, a malware framework used since 2017 to steal data and deploy ransomware. The multinational takedown involved seizing 106 servers, remediating 15,000 infected websites, and disabling the botnet linked to ransomware variants like DoppelPaymer and LockBit.