International Coalition Successfully Dismantles Infostealers Targeting Millions Of Victims Worldwide

A coordinated international effort, backed by Eurojust, has dismantled servers hosting infostealers. These malware types, known as RedLine and META, were used for stealing personal data globally. Authorities from the Netherlands, the US, Belgium, Portugal, the UK, and Australia participated in this operation. They successfully shut down three servers in the Netherlands, seized two domains, unsealed charges in the US, and arrested two individuals in Belgium.

RedLine and META targeted millions of victims worldwide. They extracted sensitive information from infected devices. This included usernames, passwords, addresses, email addresses, phone numbers, cryptocurrency wallets, and cookies stored automatically. The stolen data was then sold to other criminals through illegal marketplaces.

The buyers of this data used it for financial theft and further hacking activities. The scale of these operations made them among the largest malware platforms globally. The takedown represents a significant step in combating cybercrime on an international level.

Investigations into these malware platforms began when victims reported incidents and a security firm alerted authorities about potential servers in the Netherlands linked to the software. Authorities found over 1,200 servers across multiple countries running this malware.

Eurojust played a crucial role by coordinating cooperation between various countries involved. This coordination allowed for swift information exchange and action planning to dismantle these infostealers effectively.

Operation Details and Outcomes

The global operation to take down RedLine and META occurred on 28 October. It involved shutting down key infrastructure supporting these malware operations. By removing these servers and seizing domains, authorities disrupted a major source of cybercrime activity.

This operation highlights the importance of international collaboration in tackling cyber threats that transcend borders. The successful takedown demonstrates how coordinated efforts can effectively address complex challenges posed by cybercriminals worldwide.

The dismantling of these infostealers marks a significant achievement in cybersecurity efforts globally. It underscores the ongoing need for vigilance and cooperation among nations to protect individuals' personal data from malicious actors online.

With inputs from WAM