{"rewrite":{"id":"r_7445d1bb031b83f43ee5f064","clusterId":"c_e63c5e0c29c49007eb8a2e5d","slug":"eset-helps-takedown-amadey-botnet-and-stealc-in-operation-endgame","model":"deepseek-v4-flash","headline":"ESET Helps Takedown Amadey Botnet and Stealc in Operation Endgame","summary":"ESET joined Operation Endgame, a global takedown of the Amadey botnet and the Stealc info-stealer. The operation neutralized about 50 domains and 200 IP-based C\u0026C servers. ESET contributed three years of tracking data, technical analysis, and threat intelligence. Both malware families are sold as services, with affiliates hosting their own infrastructure, which made clustering analysis essential to the targeting.","whyItMatters":"Because both malware families are sold as services with affiliates running their own infrastructure, the takedown depended on ESET's clustering analysis to identify shared C\u0026C servers worth prioritizing.","webCardHtml":"\u003cp\u003eBoth malware families are advertised on darknet forums, and ESET used the threat intelligence platform Flare.io to monitor those communities. The business models differ. Amadey charges affiliates per build generation, while Stealc sells a subscription with unlimited builds. Because affiliates host their own admin panels on their own servers, the operation could not cut a single central command point. ESET grouped samples by C\u0026amp;C servers, build identifiers, encryption keys, and campaign identifiers to find shared infrastructure worth prioritizing. Distribution runs through fake software updates, cracked installers, and third-party loaders.\u003c/p\u003e","blueskyPost":"ESET joined Operation Endgame, the global takedown of the Amadey botnet and Stealc info-stealer. About 50 domains and 200 C\u0026C servers were neutralized. ESET's three years of tracking data and clustering analysis guided the targeting.","twitterPost":"ESET joined Operation Endgame, the global takedown of the Amadey botnet and Stealc info-stealer. About 50 domains and 200 C\u0026C servers were neutralized. ESET's three years of tracking data and clustering analysis guided the targeting.","threadsPost":null,"newsletterBlurb":"ESET took part in Operation Endgame, the global takedown of the Amadey botnet and Stealc info-stealer. The operation neutralized about 50 domains and 200 C\u0026C servers. ESET's three years of tracking data and clustering analysis guided the targeting.","attributionJson":"[{\"source\":\"ASCII.jp\",\"url\":\"https://ascii.jp/elem/000/004/430/4430305/?rss\",\"title\":\"世界規模のサイバー犯罪解体作戦、その舞台裏　ESETがAmadeyとStealcの無力化を支援\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":6124,"outputTokens":2293,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1788322293,"createdAt":"2026-09-02T04:04:28.000Z","publishedAt":"2026-09-02T04:07:24.000Z","updatedAt":"2026-09-02T04:07:24.000Z"},"cluster":{"id":"c_e63c5e0c29c49007eb8a2e5d","canonicalTitle":"世界規模のサイバー犯罪解体作戦、その舞台裏　ESETがAmadeyとStealcの無力化を支援","representativeArticleId":"a_7b152a947ddd9808582b86bb","sourceCount":1,"writtenSourceCount":1,"writeAttempts":0,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[],\"studios\":[],\"people\":[],\"type\":\"news\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-09-01T05:00:00.000Z","lastSeenAt":"2026-09-01T05:00:00.000Z","updatedAt":"2026-09-02T04:10:06.000Z"},"attribution":[{"source":"ASCII.jp","url":"https://ascii.jp/elem/000/004/430/4430305/?rss","title":"世界規模のサイバー犯罪解体作戦、その舞台裏　ESETがAmadeyとStealcの無力化を支援"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":[],"studios":[],"people":[],"type":"news","domain":"other","is_roundup":false},"keyFacts":null}