Back to Feed
MalwareNov 12, 2026

European authorities take down SteaIC malware servers for second time this year

European authorities dismantle over 100 servers used by StealC malware for the second time this year.

European police have dismantled over 100 servers used by the StealC password-stealing malware, marking the second major takedown this year. The operation, involving law enforcement from nine countries, also disrupted servers and domains linked to Gootloader and CastleRAT malware. Investigators recovered approximately 6.4 million stolen login credentials from over 40,000 victims. No arrests were made in this latest action.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run Microsoft?

Get an email when a new story names Microsoft, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

The StealC malware operation compromised over 40,000 victims and harvested 6.4 million login credentials before European law enforcement dismantled its infrastructure for the second time in a single year. The repeated need for takedowns highlights how resilient and persistent credential-stealing malware ecosystems are, often rebuilding quickly after disruption. Victims likely fell prey to phishing, malicious downloads, or compromised software, underscoring how poor security hygiene at the user level fuels large-scale credential theft. The stolen credentials can enable account takeovers, fraud, and further intrusions across personal and corporate systems alike. This incident demonstrates that law enforcement action alone is insufficient — individual and organizational defenses must be robust enough to prevent initial infection.

What helps against this

How we list vendors

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • malware — SteaIC
  • malware — Gootloader
  • malware — CastleRAT

Entities

Microsoft (vendor)bulletproof hosting (technology)