As part of the last “season” Operation EndgameThe law enforcement coalition reduced about 300 servers around the world, neutralized 650 domains and issued arrest warrants against 20 goals.
The ENDGAME operation, first launched in May 2024, is a regular law enforcement service aimed at orientation and infrastructure that help either directly provide initial or consolidation for redemption. Previous publication inhabited About the dismantling of the initial families of malware used to deliver excitement.
The last iteration, for Europol, focused on new malicious programs and successive groups that appeared again after capturing last year, such as Bumblebee, Lactrodectus, QAAKBOT, DANABOT, TRICKBOT and Hot cookies. The interaction was carried out between May 19 and 22, 2025.
“In addition, a week of action was confiscated 3.5 million euros from cryptocurrency, which led to the confiscation of the total amount during the operation for more than 21.2 million euros,” the agency – Note.
Europol noted that malware options offer as a service threat to other subjects and used for large -scale ransomware attacks. In addition, international arrest warrants have been issued against 20 key subjects that are believed to be provided or working with the initial access crew access services.
“This new phase demonstrates the ability of law enforcement agencies to adapt and strike again, even if cybercrime is being redesigned and reorganized,” said Europol Executive Director Catherine de Ball. “By destroying the services on which criminals are counting on the deployment of the excitement, we violate the chain of murder at its source.”
The Federal Criminal Police of Germany (aka Bundeskriminalamt or BKA) has disclosed that the criminal case was initiated against 37 subjects identified. Some persons who have been added to EU is the most desired list given below –
- 36, 36
- Sorry for the don,
- Iskander Rivekatovich Sharafetinova (aka Alik, Gucci), 32 years, Trickbot member
- Mikhail Mikhailovich Tsarev (aka Manga), 36, member of the Trickbot group
- Maxim Sergevich Golochkin (aka Bentley, Manuel, Max17, Volhvb, Crypt), 43 years, a member of the Trackbot group
- Vitalii Nikolaevich Kovalev (aka Stern, Ben, Tomb, Vincent, Bentley, Bergen, Alex Konor), 36 years old, Trickbot member
The disclosure comes as European-scale law enforcement operation that resulted in 270 arrests of dark web vendors and builders across 10 Countries: The United States (130), the United States Kingdom (37), France (29), South Korea (19), Austria (4), The Netherlands (4), Brazil (3), Switzerland (1), and Spain (1).
The suspects, Europol noted, were identified on the basis of exploration collected from the parishes of the dark markets of the Internet platform, Tor2door, Bohemia and Kingdom Markets. Several suspects are allegedly spent thousands of sales in illegal markets, often using encryption and cryptocurrency tools to hide their digital traces.
“Known as Raptor Operation, this international analysis dismantled networks that trade drugs, weapons and counterfeit goods, sending a clear signal to the criminals, hiding behind the illusion of anonymity,” Europol – Note.
Along with the arrests of 184 million euros cash and cryptocurrencies, 2 tons of drugs, 180 firearms, 12,500 counterfeit products and more than 4 tons of illegal tobacco were seized by the authorities. Follows a joint action Operation Performance In May 2023, which led to the arrest of 288 dark sellers and buyers and capture of 50.8 million euros and cryptocurrency.
“With the traditional market platforms under the strengthening of pressure, the criminal subjects are moving to smaller stores for one-time proposals managed by individual sellers to avoid the market platform and minimize the exposition,” the MEP said. “Illegal drugs remain the best goods sold in the dark network, but in 2023 there was also a surge in prescription drug trafficking and the growth of false services, including false deaths and fake lists designed by buyers’ scammers.”
