{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/takedown/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":true,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":[],"_cs_severities":["medium"],"_cs_tags":["malware","infostealer","c2","takedown"],"_cs_type":"threat","_cs_vendors":[],"content_html":"\u003cp\u003eEuropean and international authorities, including police from Germany, the Netherlands, Britain, and the United States, conducted an operation to dismantle infrastructure linked to the StealC, Gootloader, and CastleRAT malware. Investigators traced the network to the Virtualine bulletproof hosting provider. This action follows a previous takedown of related infrastructure in June.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eLaw enforcement disrupted 235 servers and 257 domains. Investigators uncovered approximately 6.4 million stolen login credentials from more than 40,000 victims.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eIndividuals are encouraged to visit police-sanctioned resources such as politie.nl/checkyourhack or haveibeenpwned.com to check for potential compromise and review recommended remediation steps.\u003c/p\u003e\n","date_modified":"2026-11-12T16:43:53Z","date_published":"2026-11-12T16:43:53Z","id":"https://feed.craftedsignal.io/briefs/2026-11-stealic-takedown/","summary":"International law enforcement disrupted 235 servers and 257 domains used by StealC, Gootloader, and CastleRAT malware, identifying approximately 6.4 million stolen credentials.","title":"International law enforcement disrupts StealC, Gootloader, and CastleRAT malware infrastructure","url":"https://feed.craftedsignal.io/briefs/2026-11-stealic-takedown/"}],"language":"en","title":"CraftedSignal Threat Feed - Takedown","version":"https://jsonfeed.org/version/1.1"}