Operation Endgame Update

Rhadamanthys infolstealer, VenomRAT, and Elysium botnet have been disrupted in a global law enforcement operation.

Between November 10-14, LE conducted 11 searches across Germany, Greece, and the Netherlands, seized 20 domains, and took down over 1,000 servers linked to these illicit services.

Also, a key individual linked to Venom RAT was arrested in Greece on November 3rd.

End of the game for cybercrime infrastructure: 1025 servers taken down – Operation Endgame’s latest phase targeted the infostealer Rhadamanthys, Remote Access Trojan VenomRAT, and the botnet Elysium | Europol

Between 10 and 14 November 2025, the latest phase of Operation Endgame was coordinated from Europol’s headquarters in The Hague. The actions targeted one of the biggest infostealers (Rhadamanthys), the Remote Access Trojan VenomRAT, and the botnet Elysium, all of which played a key role in international cybercrime. Authorities took down these three large cybercrime enablers. The main suspect for VenomRAT was also arrested in Greece on 3 November 2025.

Europol