Elysium Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
25
occurrences
First Seen
November 13, 2025
Last Seen
June 18, 2026

Elysium is a malware family tracked across 10 threat clusters and 25 intelligence report mentions on ThreatCluster. First observed November 13, 2025; most recent activity June 18, 2026.

Overview

Elysium is a malware family categorized as an information-stealing tool used by cybercriminal networks to exfiltrate data. It appears within the broader wave of data-theft operations that international law enforcement is actively dismantling, highlighting the ongoing threat posed by information-stealing malware and the infrastructure that supports it.

Related Threat Clusters

  • Operation Endgame Disrupts Evil Corp's SocGholish Malware Network

    On June 18, 2026, international law enforcement agencies launched Operation Endgame, disrupting the SocGholish malware infrastructure linked to the Russian cybercrime group Evil Corp. The operation resulted in the…

    67 articles · Updated June 18, 2026
  • Operation Sentinel Leads to 574 Arrests and $3M Recovery in Africa

    Interpol's Operation Sentinel resulted in the arrest of 574 individuals across several African countries, targeting cybercriminal activities including business email compromise, digital extortion, and ransomware. The…

    10 articles · Updated December 23, 2025
  • Operation Endgame Disrupts Major Malware Networks Rhadamanthys, VenomRAT, and Elysium

    Law enforcement from nine countries has dismantled over 1,000 servers associated with the Rhadamanthys infostealer, VenomRAT remote access Trojan, and Elysium botnet during Operation Endgame. This operation, coordinated…

    8 articles · Updated November 13, 2025
  • Operation Endgame Dismantles 1,025 Servers Linked to Major Malware

    Europol-led Operation Endgame has successfully seized 1,025 servers associated with the Rhadamanthys, VenomRAT, and Elysium malware. The operation also resulted in the arrest of a key suspect in Greece, disrupting…

    4 articles · Updated November 13, 2025
  • Cybercrime Crackdown Targets Malware and AI Threats

    Law enforcement and cybersecurity firms have launched intensified operations against cybercrime, focusing on sophisticated malware networks and supply chain attacks. Collaborators including CrowdStrike, Europol, and the…

    15 articles · Updated November 18, 2025
  • Operation Endgame 3.0 Disrupts Major Malware Networks

    Europol and law enforcement agencies from 11 countries executed Operation Endgame 3.0 from November 10 to 13, 2025, dismantling the infrastructure of three major malware operations: Rhadamanthys, VenomRAT, and Elysium.…

    20 articles · Updated November 24, 2025
  • Dutch Police Seize 250 Servers from Cybercriminal Hosting Service

    The Dutch police have seized approximately 250 servers from a bulletproof hosting service used by cybercriminals. This service, operational since 2022, has been linked to over 80 cybercrime investigations both in the…

    2 articles · Updated November 17, 2025
  • Cybercrime Crackdown Targets Malware and AI Threats

    Law enforcement and cybersecurity firms have intensified operations against cybercrime, disrupting sophisticated malware networks and supply chain attacks. Collaborating partners, including CrowdStrike, Europol, and the…

    3 articles · Updated November 18, 2025
  • Operation Endgame: 1,025 Servers Linked to Major Malware Dismantled

    Europol-led Operation Endgame has successfully seized 1,025 servers associated with the Rhadamanthys, VenomRAT, and Elysium malware. The operation also resulted in the arrest of a key suspect in Greece, disrupting…

    4 articles · Updated November 13, 2025
  • Dutch Police Seize 250 Servers from Cybercriminal Hosting Service

    The Dutch police have seized approximately 250 servers from a bulletproof hosting service used by cybercriminals. This service has been operational since 2022 and has been linked to over 80 cybercrime investigations…

    2 articles · Updated November 17, 2025

Recent Intelligence Reports

  • Police cleans nearly 15,000 SocGholish — Bleepingcomputer · June 18, 2026
  • Interpol sweep takes down cybercrooks in 19 countries — Csoonline · December 24, 2025
  • Operation Endgame disrupts Rhadamanthys information-stealing malware — Bitdefender · November 24, 2025
  • AI-Powered Espionage Will Favor China — News.Risky.Biz · November 20, 2025
  • Operation ENDGAME 3.0: Europol Dismantles Three Malware Networks in Major Cybercrime Sweep — Cpomagazine · November 18, 2025
  • Dutch police seizes 250 servers used by “bulletproof hosting” service — Bleepingcomputer · November 17, 2025
  • Dutch police seizes 250 servers used by “bulletproof hosting” service — Bleepingcomputer · November 17, 2025
  • Cybercrime crackdown disrupts malware, exposes AI attack risks — Securitybrief · November 17, 2025

CVSS v3.1 Breakdown