Microsoft and Allies Smash Shared Infrastructure of Amadey and StealC Malware

Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies. The post Microsoft and Allies Smash Shared Infrastructure of Amadey and StealC Malware appeared first on SecurityWeek .

The article reports that Microsoft, Europol, and multiple cybersecurity firms disrupted hundreds of domains and C2 servers supporting the Amadey and StealC malware ecosystems as part of Operation Endgame, significantly degrading their ability to operate as malware-as-a-service platforms.[2][4][5] These families were linked to over 140,000 infected systems and the theft of tens of millions of credentials, enabling downstream ransomware, fraud, and attacks on critical infrastructure.[2][6][7] From a CyberSE.AI perspective, this illustrates the operational and supply-chain risks posed by criminal MaaS ecosystems to AI-enabled businesses and underscores the need for continuous red teaming of AI-integrated systems that may be targeted for credential theft or session hijacking. It also highlights the importance of AI CISO advisory and supply-chain security to ensure that dependencies, agents, and integrated tools are hardened against compromise via such large-scale infostealer campaigns.