Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure
At a glance
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
There is no written leader briefing for this story yet. The summary below says what is known so far.
Next steps
Monitor- For awareness — no fixed action deadline for this reporting
No technical write-up beyond the summary below yet.
Next steps
Monitor- No immediate technical action — track if your estate depends on the products or vendors discussed
Summary
- Law enforcement disrupted the Gootloader, CastleRAT, and StealC infrastructure, seizing servers, domains, and victim credentials as part of Operation Endgame.
Pulse
Last change 1h ago · Next recheck 14 Nov 2026, 11:02 UK time
- Story13 Nov 2026, 11:02 UK time · 1h ago
Linked reporting from SecurityWeek (independent original reporting).
Read source (SecurityWeek)
1 entry so far. The timeline chart appears once this story has more history.
Sources
- SecurityWeekNews
Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure
- ProbableSummary fact75% confidence
Investigators seized 235 servers and 257 domains, along with 6.4 million victim credentials as part of Operation Endgame.