Europol and Microsoft disrupt SocGholish, Amadey, and StealC malware networks.
Europol, Microsoft, and international law-enforcement partners disrupted infrastructure behind three major cybercrime-as-a-service operations: SocGholish, Amadey, and StealC. The operation dismantled 326 servers and 142 domains, recovered about 27 million stolen login credentials, and identified roughly €41 million in criminal crypto assets. The targeted malware families are used early in attack chains for credential theft, ransomware deployment, fraud, and attacks on critical infrastructure. Microsoft described the action as targeting the cybercrime “assembly line,” not just isolated malware services