A new round of Europol’s Operation Endgame dismantled Rhadamanthys, Venom RAT, and Elysium botnet

A new round of Europol’s Operation Endgame dismantled Rhadamanthys, Venom RAT, and the Elysium botnet, with the coordinated action running from 10 to 13 November 2025. According to Europol’s press release, the operation disrupted malware infrastructure responsible for infecting hundreds of thousands of victims worldwide and stealing credentials across millions of accounts, including over 100 000 crypto wallets worth millions of euros.

The crackdown involved arrests and searches across several countries, including one arrest in Greece and searches in Germany, Greece, and the Netherlands, as part of a broad international coalition that also included Australia, Canada, and the United States with agencies such as the FBI, DOJ, and Australian Federal Police. The joint effort led to the takedown of more than 1,025 servers worldwide and the seizure of 20 domains used by the operators. The initiative forms part of a persistent, global endeavour to disrupt ransomware infrastructure and the services enabling it.