Major

Future

Bitcoin

Strike

Cyber

<div class="wp-block-group has-background is-vertical is-layout-flex wp-container-core-group-is-layout-8cf370e7 wp-block-group-is-layout-flex" style="background-color:#abb7c226;font-style:normal;font-weight:200">
 <p><strong>Key Highlights</strong></p>
 <ul>
  <li>The FBI and allies seized 1,025 servers tied to crypto-stealing malware.</li>
  <li>Major strains taken down: Rhadamanthys, VenomRAT, Elysium.</li>
  <li>It is part of a wider U.S. crackdown on global scam and fraud networks.</li>
 </ul>
</div>
<p>The U.S. Federal Bureau of Investigation (FBI) and international law enforcement partners have carried out one of their largest cybercrime disruptions of the year, dismantling malware networks that have been quietly raiding crypto wallets, browser credentials, and financial accounts across the globe.</p>
<p>The agency announced that Operation Endgame, a multinational effort <a href="https://www.fbi.gov/news/press-releases/operation-endgame-coordinated-worldwide-law-enforcement-action-against-network-of-cybercriminals" target="_blank" rel="noopener noreferrer nofollow">launched</a> in May 2024, took down 1,025 servers, seized 20 domains, and led to an arrest in Greece. This marks the third major takedown tied to the ongoing initiative.</p>
<h2 class="wp-block-heading" id="cyber-tools-on-target">Cyber tools on target</h2>
<p>The targets of the operation were Rhadamanthys, a commercial-grade infostealer sold as malware-as-a-service, VenomRAT, a remote access Trojan used for surveillance and credential harvesting, and Elysium, a stealth botnet known for deploying cryptomining payloads and distributing additional malware.</p>
<p>These tools have been at the center of a surge in crypto wallet drains, credential hijacking, and large-scale financial fraud. Rhadamanthys, in particular, is designed specifically to vacuum up seed phrases, wallet files, browser auto-fills, exchange logins, and system data, a common choice for phishing crews and Telegram-based drainer ops.</p>
<h2 class="wp-block-heading" id="global-operation-targets-cybercrime-networks">Global operation targets cybercrime networks</h2>
<p>The FBI executed the takedown alongside authorities in Australia, Belgium, Canada, Denmark, France, Germany, Greece, Lithuania, the Netherlands, and the UK, targeting the infrastructure that cybercriminals depend on to automate attacks.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet">
   <p>The FBI and our partners successfully dismantled an infostealer, remote access trojan, and botnet as part of Operation Endgame. This marks the third large-scale action in this ongoing initiative, which was launched to combat criminal infrastructure used for ransomware attacks… <a href="https://t.co/cjM0QYZpKl" rel="noopener noreferrer nofollow">pic.twitter.com/cjM0QYZpKl</a></p>— FBI (@FBI) <a href="https://twitter.com/FBI/status/1989141778847453537?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">November 14, 2025</a>
  </blockquote>
 </div>
</figure>
<p>They also seized command-and-control nodes used to manage infected machines, which is expected to disrupt thousands of active malware campaigns.</p>
<h2 class="wp-block-heading" id="a-broader-crackdown-on-crypto-driven-crime">A broader crackdown on crypto-driven crime</h2>
<p>The botnet takedown follows the launch of the Scam Center Strike Force, a new U.S. initiative focused on dismantling <a href="https://www.cryptotimes.io/2025/11/15/u-s-launches-strike-force-to-battle-9b-crypto-scams/" target="_blank" rel="noopener noreferrer nofollow">Southeast Asian scam</a> compounds and Chinese-linked criminal networks that deploy similar infostealers. The task force has already seized $401.6 million in crypto, filed forfeiture actions for another $80 million, and coordinated arrests in Bali and Burma.</p>
<p>“The impact on victims is devastating,” said FBI Deputy Assistant Director Gregory Heeb. “Our job is to stop these criminals, and with global cooperation, we will.”</p>
<h2 class="wp-block-heading" id="what-comes-next">What comes next</h2>
<p>The FBI says more coordinated actions are coming as agencies shift from chasing individual hackers to dismantling the infrastructures, such as servers, domains, and distribution systems, behind global crypto crime. Future phases of Operation Endgame will target malware developers, hosting providers, and botnet operators.</p>
<p>The agency also warns crypto users to treat any unauthorized access, drained accounts, or odd browser behavior as a sign of device compromise, and to migrate wallets and reset credentials immediately.</p>
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
 <p>Also read: <a href="https://www.cryptotimes.io/2025/11/15/leaked-emails-reveal-epstein-helped-fund-mits-bitcoin-work/" target="_blank" rel="noopener noreferrer nofollow">Leaked Emails Reveal Epstein Helped Fund MIT’s Bitcoin Work</a></p>
</blockquote>

FBI and Global Agencies Take Down Crypto-Stealing Botnets

Table of Contents

The Crypto Times

Other articles published on Nov 15, 2025

Join our free newsletter for daily crypto updates!