Europol Freezes €41M in Stolen Crypto Assets Amid Global Malware Takedown

A global law enforcement operation has frozen over €41 million ($47 million) in criminal cryptocurrency assets as part of Operation Endgame, Europol announced on Wednesday. The two-week strike dismantled the infrastructure behind three malware families: SocGholish, Amadey, and StealC.

The malware targets crypto users, with StealC scraping passwords, browser cookies, and crypto wallet data from infected machines. Its control panel even included a plugin that tried to decrypt the seed phrases of victims' MetaMask wallets, researchers at Proofpoint found.

Police took down 326 servers and 142 domains, recovered almost 27 million stolen credentials from over 385,000 compromised systems, and cleaned nearly 15,000 infected websites. Microsoft, a partner in the operation, tied Amadey and StealC to over 140,000 infected computers worldwide in the first two weeks of May alone.