Operation Endgame is a threat campaign tracked across 24 threat clusters and 68 intelligence report mentions on ThreatCluster. First observed October 23, 2025; most recent activity July 13, 2026.
On June 18, 2026, international law enforcement agencies launched Operation Endgame, disrupting the SocGholish malware infrastructure linked to the Russian cybercrime group Evil Corp. The operation resulted in the…
The European Union has condemned and sanctioned Russia for a prolonged cyber espionage campaign targeting its member states. The campaign, orchestrated by the 16th Centre of the FSB, has involved infiltrating government…
On May 19-20, 2026, an international law enforcement operation, dubbed Operation Saffron, successfully dismantled First VPN, a virtual private network service heavily utilized by cybercriminals for ransomware, fraud,…
An international cybercrime operation, Operation Synergia III, coordinated by INTERPOL, has dismantled over 45,000 malicious IP addresses and servers linked to phishing, malware, and ransomware attacks. The operation,…
The Five Eyes cybersecurity agencies issued a call-to-action regarding the growing threat posed by AI in cyber attacks. They emphasize that AI is lowering barriers for malicious actors and accelerating the exploitation…
A study by Semperis reveals that 52% of ransomware attacks target organizations during holidays and weekends, exploiting reduced cybersecurity staffing. The report surveyed 1,500 IT and security professionals across ten…
On June 24, 2026, Europol announced the successful disruption of a significant cybercrime-as-a-service (CaaS) infrastructure linked to ransomware and financial fraud. This operation, part of Operation Endgame, involved…
ESET Research participated in Operation Endgame, a coordinated effort to disrupt the Amadey botnet and Stealc infostealer. This operation involved multiple organizations, including Microsoft and Europol, targeting the…
Cybercrime crews are often portrayed as formidable entities, but industry leaders are advocating for a shift in narrative. Former CISA head Jen Easterly and Trellix VP John Fokker emphasize that these actors are merely…
Recent arrests of cybercriminals in Russia indicate a changing landscape for cybercrime, traditionally tolerated by the state as long as domestic interests were not targeted. The ongoing Operation Endgame, initiated in…