International Coalition Dismantles Malware Threatening Millions

International Coalition Shuts Down Major Malware Platforms, RedLine and META

A global operation, backed by Eurojust, has successfully dismantled the servers of two major malware platforms—RedLine and META—used to steal personal data and execute cybercrimes on a global scale. These infostealers, which were responsible for targeting millions of victims worldwide, rank among the largest malware platforms ever taken down. Authorities from the Netherlands, the United States, Belgium, Portugal, the United Kingdom, and Australia collaborated to shut down three servers in the Netherlands, seize two domains, unseal criminal charges in the U.S., and arrest two individuals in Belgium.

How RedLine and META Operated

RedLine and META, once installed on victims’ devices, stole a wide range of personal data, including saved usernames, passwords, addresses, email addresses, phone numbers, cryptocurrency wallets, and browser cookies. The stolen data was then sold through illegal marketplaces to other criminals, who used it to commit financial theft, cryptocurrency fraud, and further hacking activities.

Investigation and Take Down

The investigation into these malware platforms started after victims reported the incidents and a security company alerted authorities about suspicious servers located in the Netherlands. Further inquiries revealed over 1,200 servers in multiple countries hosting the malware. To coordinate this large-scale response, Eurojust facilitated the communication and cooperation between the involved countries’ law enforcement agencies.

The coordinated operation culminated on October 28, with authorities taking down three servers in the Netherlands, seizing two major domains, unsealing charges in the U.S., and conducting arrests in Belgium. As part of the operation, the authorities also sent a strong message to the network of criminals by distributing a video showing that critical data from their operations had been obtained and that their illegal activities would be stopped. Belgian officials also shut down several communication channels associated with RedLine and META.

What’s Next?

In addition to dismantling the malware network, authorities retrieved a database of clients involved in buying the stolen data. Investigations will now focus on these individuals and their further criminal activities.

For those concerned they may have been affected by RedLine and META, a private security company has launched an online tool to help individuals determine if their personal data was compromised. The tool, available through Operation Magnus, also provides guidance on the steps to take if data has been stolen.

Participating Authorities

The following authorities were involved in the international operation:

– Netherlands: National Police, Team Cybercrime Limburg, Public Prosecution Service
– United States: FBI, Naval Criminal Investigative Services, IRS Criminal Investigations, Department of Defense Criminal Investigative Service, Army Criminal Investigation Division
– Belgium: Federal Prosecutor’s Office, Federal Police
– Portugal: Polícia Judiciária
– United Kingdom: National Crime Agency
– Australia: Australian Federal Police

For more information, visit the source link.