
An international law enforcement coalition has successfully taken down the server infrastructure behind three notorious malware families—Gootloader, CastleRAT, and StealC—in a major cybercrime crackdown. According to Germany’s Federal Criminal Police Office (BKA), authorities seized approximately 6.4 million stolen login credentials belonging to more than 40,000 victims worldwide. Cybercriminals relied on Gootloader’s SEO-poisoned WordPress sites to distribute fake legal documents that infected over 25,000 computers, subsequently deploying StealC and CastleRAT to harvest passwords and launch devastating ransomware attacks.