Signal
International law enforcement disrupts StealC, Amadey, and SocGholish malware operations
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-06-24 12:30 UTCUpdated 2026-06-25 02:47 UTC
rss
cveexploitsbreachesmalwarethreat_actorsadvisories
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (3 domains)domains are deduped. counts indicate coverage, not truth.3 top sources shown
Overview
Coverage discusses speculative scenarios around ~$47M; treat as market chatter and see linked sources.
Entities
MicrosoftEuropolProofpointIBMStealCAmadeySocGholish
Score total
1.01
Momentum 24h
3
Posts
3
Origins
3
Source types
1
Duplicate ratio
0%
Why now
- Recent coordinated crackdown targets active malware infrastructure causing widespread credential theft.
- Use of AI and C2 infiltration marks advancement in law enforcement cyber operations.
- Immediate impact on cybercrime supply chains limits ongoing and future attacks.
Why it matters
- Disrupts major malware-as-a-service operations, reducing cybercrime capabilities.
- Recovers millions of stolen credentials and blocks significant illicit cryptocurrency funds.
- Demonstrates effective international collaboration and use of AI in cybercrime infrastructure takedowns.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
- StealC and Amadey malware infrastructure disrupted by international law enforcement
- Operation involved takedown of over 300 servers and 140 domains, recovery of 27 million stolen credentials, and blocking of $47 million in crypto assets
- AI analysis and C2 infiltration assisted the takedown of StealC infrastructure
How sources frame it
- Microsoft: neutral
All evidence
All evidence
StealC infrastructure takedown assisted by AI analysis, C2 infiltration
SC Media · scworld.com · 2026-06-25 02:47 UTC
Three ‘cybercrime as a service’ operations undercut by Microsoft, law enforcement
The Record (Recorded Future News) · therecord.media · 2026-06-24 20:00 UTC
Infostealers StealC and Amadey Disrupted in Police Crackdown
BankInfoSecurity · bankinfosecurity.com · 2026-06-24 18:58 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 3Origin domains: 3Duplicates: -
Showing 3 / 0
Top publishers (this list)
- SC Media (1)
- The Record (Recorded Future News) (1)
- BankInfoSecurity (1)
Top origin domains (this list)
- scworld.com (1)
- therecord.media (1)
- bankinfosecurity.com (1)