International agency release

# End of the game for cybercrime infrastructure: 1025 servers taken down – Operation Endgame’s latest phase targeted the infostealer Rhadamanthys, Remote Access Trojan VenomRAT, and the botnet Elysium

Europol, November 13, 2025. Wave 3 infrastructure figures and the Greek arrest.

**Source type:** International agency release

**Published:** November 13, 2025

**Research grade:** P2

**Used in entries:** 8

## Bibliographic record

**Publisher:** Europol

**Published:** November 13, 2025

**Source type:** International agency release

**Research grade:** Source grade P2

**Language:** English

**Official record:** Official publication

**Address:** [https://www.europol.europa.eu/media-press/newsroom/news/end-of-game-for-cybercrime-infrastructure-1025-servers-taken-down](https://www.europol.europa.eu/media-press/newsroom/news/end-of-game-for-cybercrime-infrastructure-1025-servers-taken-down)

**What it supports:** Wave 3 infrastructure figures and the Greek arrest

**Dataset id:** src\_europol\_endgame\_2025\_nov

How this source is used

Cited 8 times across 3 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[Operation Endgame wave 3](https://takedownindex.org/takedowns/operation-endgame-wave-3)

Multi threat campaign, November 2025

Primary source

### Organization roles

5 citations

Cited for an organization's recorded role in a takedown.

-
[European Union Agency for Law Enforcement Cooperation](https://takedownindex.org/takedowns/operation-endgame-wave-3)

Coordinator, Operation Endgame wave 3

Primary source
-
[Hellenic Police](https://takedownindex.org/takedowns/operation-endgame-wave-3)

Arresting, Operation Endgame wave 3

Primary source
-
[Zentralstelle zur Bekämpfung der Internetkriminalität, Generalstaatsanwaltschaft Frankfurt am Main](https://takedownindex.org/takedowns/operation-endgame-wave-3)

Co-lead, Operation Endgame wave 3

Primary source
-
[Bundeskriminalamt](https://takedownindex.org/takedowns/operation-endgame-wave-3)

Co-lead, Operation Endgame wave 3

Primary source
-
[Juridiction nationale chargée de la lutte contre la criminalité organisée](https://takedownindex.org/takedowns/operation-endgame-wave-3)

Prosecuting, Operation Endgame wave 3

Primary source

### Infrastructure

2 citations

Cited for infrastructure recorded as acted on.

-
[more than 1,025 servers](https://takedownindex.org/takedowns/operation-endgame-wave-3)

Servers disabled, Operation Endgame wave 3

Primary source
-
[20 domains](https://takedownindex.org/takedowns/operation-endgame-wave-3)

Domains seized, Operation Endgame wave 3

Primary source

[All sources](https://takedownindex.org/sources)