News report

# Police disrupts Rhadamanthys, VenomRAT, and Elysium malware operations

BleepingComputer, November 13, 2025. Operation Endgame November 2025 wave: searches at 11 locations in Germany, Greece and the Netherlands between 10 and 14 November 2025, 20 domains seized and 1,025 servers taken down.

**Source type:** News report

**Published:** November 13, 2025

**Research grade:** S1

**Used in entries:** 3

## Bibliographic record

**Publisher:** BleepingComputer

**Published:** November 13, 2025

**Source type:** News report

**Research grade:** Source grade S1

**Language:** English

**Official record:** Not an official publication

**Address:** [https://www.bleepingcomputer.com/news/security/police-disrupts-rhadamanthys-venomrat-and-elysium-malware-operations](https://www.bleepingcomputer.com/news/security/police-disrupts-rhadamanthys-venomrat-and-elysium-malware-operations)

**What it supports:** Operation Endgame November 2025 wave: searches at 11 locations in Germany, Greece and the Netherlands between 10 and 14 November 2025, 20 domains seized and 1,025 servers taken down

**Dataset id:** src\_bleepingcomputer\_endgame\_rhadamanthys\_2025

## Research notes

- By Sergiu Gatlan. The article quotes the Europol statement directly.

How this source is used

Cited 3 times across 2 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[Operation Endgame wave 3](https://takedownindex.org/takedowns/operation-endgame-wave-3)

Multi threat campaign, November 2025

Supporting source

### Infrastructure

2 citations

Cited for infrastructure recorded as acted on.

-
[more than 1,025 servers](https://takedownindex.org/takedowns/operation-endgame-wave-3)

Servers disabled, Operation Endgame wave 3

Supporting source
-
[20 domains](https://takedownindex.org/takedowns/operation-endgame-wave-3)

Domains seized, Operation Endgame wave 3

Supporting source

[All sources](https://takedownindex.org/sources)
