[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-europol-seizes-47m-and-27m-credentials-in-malware-sweep":10,"sections":34},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},2236,"europol-seizes-47m-and-27m-credentials-in-malware-sweep","Europol Seizes $47M and 27M Credentials in Malware Sweep","Operation Endgame dismantled infrastructure behind SocGholish, Amadey, and StealC — but no arrests means the clock is already ticking on a rebuild.","Europol and six national law enforcement agencies took down hundreds of servers and froze tens of millions in crypto tied to three active malware networks.\n\nOperation Endgame ran over the past two weeks with participation from Canada, Denmark, Germany, the Netherlands, the UK, and the US, plus private partners including Microsoft. The targets were SocGholish, a JavaScript loader linked to the Russian Malware-as-a-Service operation Evil Corp; Amadey; and StealC. Together, authorities shut down 326 servers and 142 domains, remediated 14,971 compromised legitimate websites — restaurants, auto shops, and similar small businesses quietly repurposed as malware launchpads — and recovered roughly 27 million stolen login credentials. Law enforcement also froze $47 million in cryptocurrency, effectively pulling it from circulation without being able to seize it outright.\n\nThe scale here is notable: simultaneous takedowns across three separate malware families force criminal operators to rebuild in parallel rather than pivot resources from one network to another. That coordination, alongside private-sector involvement, raises the operational cost for groups that typically treat infrastructure as disposable. The 14,971 remediated websites also represent real small-business owners who had no idea their sites were being used against their own customers.\n\nNo arrests were made, and Europol did not confirm whether any key operators were identified — which is the part that matters most. Disruptions like this have a pattern: infrastructure goes dark, then reappears weeks later, slightly reconfigured. Operation Endgame is a meaningful disruption, not a conclusion.","[\"security\",\"malware\",\"europol\",\"cybercrime\"]","2026-06-25T15:45:00.000Z","2026-06-25T17:11:03.661Z","2026-06-27T15:37:42.951Z","published",null,[],"security",[24,26,27,28],"malware","europol","cybercrime",[30],{"name":31,"url":32},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002F27-million-stolen-login-credentials-have-been-recovered-global-coordinated-takedown-hits-socgholish-amadey-and-stealc-malware-networks-where-it-hurt",0,{"sections":35},[36,41,45,50,55,60,65,70,75,80,85,89,94,99],{"name":37,"slug":38,"count":39,"latest_published_at":40},"AI","ai",2590,"2026-07-16T04:00:00.000Z",{"name":42,"slug":24,"count":43,"latest_published_at":44},"Security",294,"2026-07-15T19:59:48.000Z",{"name":46,"slug":47,"count":48,"latest_published_at":49},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Policy","policy",158,"2026-07-16T00:02:48.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",122,"2026-07-14T19:46:26.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Consumer Tech","consumer-tech",93,"2026-07-13T13:20:48.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Software","software",70,"2026-07-13T19:52:25.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Science","science",66,"2026-07-10T10:29:37.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Dev Tools","dev-tools",59,"2026-07-07T04:00:00.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":86,"slug":87,"count":83,"latest_published_at":88},"Startups","startups","2026-06-29T20:55:50.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"General","general",29,"2026-07-10T22:28:58.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]