Major Europol operation hits malware network

LONDON

Four suspects were arrested and more than 100 internet servers taken down or disrupted following Operation Endgame, "largest ever action" against botnets, Europol said on Thursday.

In a statement, Europol said that droppers including, IcedID, SystemBC, Pikabot, Smokeloader, Bumblebee and Trickbot were targeted in a joint effort on May 27-29 as part of an effort to hit cyber infrastructure used for criminal purposes.

A total of four people were arrested, one in Armenia and three in Ukraine, while over 100 servers taken down or disrupted in Bulgaria, Canada, Germany, Lithuania, the Netherlands, Romania, Switzerland, the UK, US and Ukraine.

Also 16 location were searched, one each in Armenia and the Netherlands, three in Portugal and 11 in Ukraine as part of the Operation Endgame, "largest ever operation" against botnets, according to Europol.

"This is the largest ever operation against botnets, which play a major role in the deployment of ransomware," said the statement, adding the operation, initiated and led by France, Germany and the Netherlands was also supported by Eurojust and involved Denmark, the UK and the US.

Armenia, Bulgaria, Lithuania, Portugal, Romania, Switzerland and Ukraine also supported the operation.

Europol noted that following the operation, eight fugitives linked to these criminal activities, wanted by Germany, will be added to Europe’s Most Wanted list on 30 May 2024.

"Operation Endgame does not end today. New actions will be announced on the website Operation Endgame," it added.