Gootloader infects victims through fake legal documents hosted on hacked websites, often WordPress sites, and has been used to install ransomware [1]. Police took down 14 servers and 218 domains and remediated 681 infected websites [1]. CastleRAT, known since 2025, gives attackers remote control of infected computers; Europol said its use led to encrypted data, crippled IT systems and ransom payments, and 120 of its servers and 39 domains were seized [1]. StealC, which harvests passwords, stored logins and digital identities for resale, lost 102 servers, following a June operation that also hit it [1][2].Victim data will be shared through Have I Been Pwned, DIVD, CheckjeHack, NoMoreLeaks, Sekoia, the Shadowserver Foundation and the Dutch NCSC [1]. Europol urged WordPress site owners to update credentials, turn on multi-factor authentication and patch their software [1].
Click Here For The Original Source.
——————————————————–
