NAIROBI, Kenya – In a sweeping crackdown on cybercrime, authorities from Europe and North America have dismantled over 300 servers and issued arrest warrants for 20 suspects linked to some of the world’s most dangerous malware operations, according to Eurojust, the EU agency for criminal justice cooperation.
Dubbed Operation Endgame, the international effort involved law enforcement agencies from Germany, France, the Netherlands, Denmark, the UK, the US, and Canada.
Officials say it’s one of the most significant offensives ever mounted against the global cybercrime infrastructure.
By the Numbers
- 300+ servers taken offline
- 650 domains neutralised
- 3.5 million euros in cryptocurrency seized this week alone
- 21.2 million euros seized since the operation began in 2024
- 36+ suspects identified, 20 criminally charged
- 18 fugitives to be added to the EU Most Wanted list on Friday
The operation targeted what experts call “initial access malware”—malicious software used to gain an initial foothold into victims’ systems before deploying further attacks, including ransomware.
“These tools are the digital equivalent of burglars picking a lock,” a cybercrime analyst familiar with the investigation told Y News. “Once they’re in, they can steal, encrypt, or destroy.”
A Global Coalition Strikes Back
Operation Endgame builds on a major botnet takedown effort in May 2024, which marked a turning point in international cooperation against cybercriminal networks.
This latest phase is broader in scope and signals a more aggressive approach, both in terms of arrests and asset seizures.
German authorities are leading the charge on the legal front, and are preparing to publish the names of 18 suspects on the European Union’s Most Wanted list, as pressure intensifies to bring the fugitives to justice.
Authorities say this week’s raids are just the beginning. A dedicated website by the international task force will continue to publish updates and call for public assistance in tracking down key suspects.
Follow-up actions are expected in the coming weeks as cybercrime units analyze the data recovered from seized servers and financial transactions linked to illicit operations.
As one EU official put it, “This isn’t just a disruption—this is a dismantling. But we’re not done yet.”
With cyberattacks growing in scale and sophistication, Operation Endgame marks a rare moment of global alignment against a common digital threat—and a warning to those still hiding behind screens.
