Largest international police operation against botnets takes down ransomware networks

Police coordinated by the European Union’s justice and police agencies have taken down computer networks responsible for spreading ransomware via infected emails, in what they called the biggest ever international operation against the lucrative form of cybercrime.

The European Union’s judicial cooperation agency, Eurojust, said Thursday that police arrested four “high value” suspects, took down more than 100 servers and seized control of over 2,000 internet domains.

The huge takedown this week, codenamed Endgame, involved coordinated action in Germany, the Netherlands, France, Denmark, Ukraine, the United States and United Kingdom, Eurojust said. Also, three suspects were arrested in Ukraine and one in Armenia. Searches were carried out in Ukraine, Portugal, the Netherlands and Armenia, EU police agency Europol added.

It is the latest international operation aimed at disrupting malware and ransomware operations. It followed a massive takedown in 2021 of a botnet called Emotet, Eurojust said. A botnet is a network of hijacked computers typically used for malicious activity.

Europol pledged it would not be the last takedown.

“Operation Endgame does not end today. New actions will be announced on the website Operation Endgame,” Europol said in a statement.

Dutch police said that the financial damage inflicted by the network on governments, companies and individual users is estimated to run to hundreds of millions of euros (dollars).

“Millions of people are also victims because their systems were infected, making them part of these botnets,” the Dutch statement said.

Eurojust said that one of the main suspects earned cryptocurrency worth at least 69 million euros ($74 million) by renting out criminal infrastructure for spreading ransomware.

“The suspect’s transactions are constantly being monitored and legal permission to seize these assets upon future actions has already been obtained,” EU police agency Europol added.

The operation targeted malware “droppers” called IcedID, Pikabot, Smokeloader, Bumblebee and Trickbot. A dropper is malicious software usually spread in emails containing infected links or attachments such as shipping invoices or order forms.

“This approach had a global impact on the dropper ecosystem,” Europol said. “The malware, whose infrastructure was taken down during the action days, facilitated attacks with ransomware and other malicious software.”

Dutch police cautioned that the actions should alert cybercriminals that they can be caught.

“This operation shows that you always leave tracks, nobody is unfindable, even online,” Stan Duijf, of the Dutch National Police, said in a video statement.
The deputy head of Germany’s Federal Criminal Police Office, Martina Link, described it as “the biggest international cyber police operation so far.”

“Thanks to intensive international cooperation, it was possible to render six of the biggest malware families harmless,” she said in a statement.

German authorities are seeking the arrest of seven people on suspicion of being members of a criminal organization whose aim was to spread the Trickbot malware. An eighth person is suspected of being one of the ringleaders of the group behind Smokeloader.

Europol said it was adding the eight suspects being sought by Germany to its most-wanted list.

—Mike Corder, Associated Press

Geir Moulson, Associated Press writer, contributed to this report.

https://www.fastcompany.com/91133244/international-police-operation-takes-down-ransomware-networks?partner=rss&utm_source=rss&utm_medium=feed&utm_campaign=rss+fastcompany&utm_content=rss

Created 11mo | May 30, 2024, 7:30:05 PM


Login to add comment

Other posts in this group

Who is Aaron Parnas? He’s the guy breaking news to Gen Z

If you’re not on TikTok, you may not have heard of Aaron Parnas. But for many young people across the U.S., he’s a prominent political news source, with over 3.5 million followers on TikTok and ju

Apr 28, 2025, 10:40:09 AM | Fast company - tech
Inside a single day on TikTok: 117 million videos, billions of views

Getting a sense of the scale of social media platforms can be tricky. While tech companies often share self-serving metrics—like monthly active users or how likely users are to buy products after

Apr 28, 2025, 10:40:08 AM | Fast company - tech
Is social media hurting teens’ mental health? It’s complicated

Social media is terrible for teens’ mental health—or is it?

At the same time that

Apr 28, 2025, 6:10:07 AM | Fast company - tech
3 quick, easy AI chatbot prompts that can help you do your job better

Fun fact: The saying “work smarter, not harder” is coming up on its 100th birthday. Coined

Apr 28, 2025, 6:10:06 AM | Fast company - tech
Is Apple falling behind on hardware?

If you’ve followed Apple for any length of time, you’ve no doubt come across the notion that the company doesn’t rush into adopting cutting-

Apr 27, 2025, 11:30:07 AM | Fast company - tech
This free audio enhancer will totally transform your voice memos

Every now and then, you run into a tool that truly wows you.

It’s rare—especially nowadays, when everyone and their cousin is coming out with overhyped AI-centric codswallop tha

Apr 26, 2025, 12:20:10 PM | Fast company - tech