Takedown - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/takedown/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 16:43:53 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgInternational law enforcement disrupts StealC, Gootloader, and CastleRAT malware infrastructurehttps://feed.craftedsignal.io/briefs/2026-11-stealic-takedown/Thu, 12 Nov 2026 16:43:53 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-stealic-takedown/International law enforcement disrupted 235 servers and 257 domains used by StealC, Gootloader, and CastleRAT malware, identifying approximately 6.4 million stolen credentials.European and international authorities, including police from Germany, the Netherlands, Britain, and the United States, conducted an operation to dismantle infrastructure linked to the StealC, Gootloader, and CastleRAT malware. Investigators traced the network to the Virtualine bulletproof hosting provider. This action follows a previous takedown of related infrastructure in June.

Impact

Law enforcement disrupted 235 servers and 257 domains. Investigators uncovered approximately 6.4 million stolen login credentials from more than 40,000 victims.

Recommendation

Individuals are encouraged to visit police-sanctioned resources such as politie.nl/checkyourhack or haveibeenpwned.com to check for potential compromise and review recommended remediation steps.

]]>mediumthreatmalwareinfostealerc2takedown