Law enforcement release

# Operation Endgame mit weiterem Erfolg: Drei gefährliche Schadsoftware-Varianten vom Netz genommen

Bundeskriminalamt (BKA). The June 2026 Operation Endgame action against the SocGholish, StealC and Amadey malware families, carried out 15–19 June 2026 by the Generalstaatsanwaltschaft Frankfurt am Main (ZIT) and the BKA with law enforcement from the Netherlands, Denmark, the United Kingdom, the USA and Canada plus Europol, Eurojust and private-sector partners: roughly 15,000 websites and more than 140 domains taken down, over 320 servers neutralised (40 in Germany), around 27 million victim credentials secured from more than 385,000 victims, and over USD 47 million in cryptocurrency identified and restrained..

**Source type:** Law enforcement release

**Published:** Not established

**Research grade:** P1

**Used in entries:** 0

## Bibliographic record

**Publisher:** Bundeskriminalamt (BKA)

**Published:** Not established

**Source type:** Law enforcement release

**Research grade:** Source grade P1

**Language:** German

**Official record:** Official publication

**Address:** [https://www.bka.de/DE/DasBKA/OrganisationAufbau/Fachabteilungen/Cybercrime/Endgame/Endgame.html](https://www.bka.de/DE/DasBKA/OrganisationAufbau/Fachabteilungen/Cybercrime/Endgame/Endgame.html)

**What it supports:** The June 2026 Operation Endgame action against the SocGholish, StealC and Amadey malware families, carried out 15–19 June 2026 by the Generalstaatsanwaltschaft Frankfurt am Main (ZIT) and the BKA with law enforcement from the Netherlands, Denmark, the United Kingdom, the USA and Canada plus Europol, Eurojust and private-sector partners: roughly 15,000 websites and more than 140 domains taken down, over 320 servers neutralised (40 in Germany), around 27 million victim credentials secured from more than 385,000 victims, and over USD 47 million in cryptocurrency identified and restrained.

**Dataset id:** src\_bundeskriminalamt\_endgame\_page

## Research notes

- The page shows no publication date anywhere in its markup — the only dates present are the operation period 15.06.–19.06.2026 — so published\_on is null rather than a guessed date.
- This is a living BKA landing page for Operation Endgame and currently describes the June 2026 action. It does NOT describe the May 2024 first wave, so it is not evidence for td\_2024\_endgame\_w1's 2024 facts; treat any 2024-dated claim attributed to this URL as unsupported.

How this source is used

Cited 0 times across 0 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

No record in the index cites this source yet.

[All sources](https://takedownindex.org/sources)