1,000+ Servers Hit in Law Enforcement Takedown of Rhadamanthys, VenomRAT, Elysium

SecurityWeek reports that a major international law enforcement operation dubbed Operation Endgame 3.0 disrupted or takedown more than 1,000 servers worldwide and seized 20 domains in a bid to tackle Rhadamanthys, VenomRAT and the Elysium botnet. An individual was arrested in Greece over his alleged role in the VenomRAT operation, as part of actions by authorities in the United States, Australia, Canada and eight European countries.

The Europol-led effort involved searches at 11 locations across Germany, Greece and the Netherlands and involved several cybersecurity companies and non-profit organisations. The dismantled malware infrastructure is described as comprising hundreds of thousands of infected computers with several million stolen credentials, and authorities noted that the main suspect had access to over 100,000 crypto wallets belonging to victims.

Police identified more than 2 million compromised email addresses and 7.4 million passwords, which Have I Been Pwned will use to notify affected users. According to The Shadowserver Foundation, Rhadamanthys has been one of the leading infostealers. 13 November 2025.