Operation Endgame Dismantles Rhadamanthys, Venom RAT, and Elysium Botnet in Global Crackdown

Operation Endgame has dismantled Rhadamanthys Stealer, Venom RAT, and the Elysium botnet in a global crackdown led by Europol and Eurojust. The activity runs from 10 to 13 November 2025, as part of the ongoing Operation Endgame to take down criminal infrastructures and combat ransomware enablers worldwide. Besides the three large cybercrime enablers, authorities arrested the main suspect behind Venom RAT in Greece on 3 November, with more than 1,025 servers taken down and 20 domains seized.

Europol said the dismantled malware infrastructure consisted of hundreds of thousands of infected computers containing several million stolen credentials, many victims unaware of the infection. Authorities from Australia, Canada, Denmark, France, Germany, Greece, Lithuania, the Netherlands, and the U.S. participated in the effort.