Global operation takes down 'dangerous' malware network – DW – 05/23/2025
In a global anti-malware crackdown, authorities from several countries took down more than 300 servers and issued international arrest warrants for 20 suspects.
Some of the world's "most dangerous malware" was disrupted this week in a coordinated international operation, which led to the issuance of 20 arrest warrants, the EU anti-crime bodies Europol and Eurojust said Friday.
In an operation involving authorities from Canada, Denmark, France, Germany, the Netherlands, Britain, and the United States, more than 300 servers were taken down, 650 domains were neutralized, and €3.5 million (about $3.9 million) in cryptocurrency was seized.
Between Monday and Thursday, the operation enabled the countries involved "to take action against the world's most dangerous malware variants and the perpetrators behind them", said Eurojust, the EU Agency for Criminal Justice Cooperation.
"Thirty-seven suspects were identified and international arrest warrants were obtained against 20 individuals criminally charged," it added.
What malware was targeted?
According to Europol and Eurojust, the software taken down, known as "initial access malware", is used "for initial infection, helping cybercriminals to enter victims' systems unnoticed and load more malware onto their devices, such as ransomware."
Malware such as Bumblebee, Lactrodectus, Qakbot, DanaBot, HijackLoader, Trickbot, and WarmCookie were targeted by the measures.
"As these variants are at the beginning of the cyberattack chain, disrupting them damages the entire 'cybercrime as a service' ecosystem," the authorities said.
Hackers exploit old software bug in VMware attack
To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video
Operation Endgame continues
About 50 of the servers neutralized this week were in Germany, the authorities said.
"In Germany, investigations focused particularly on suspicions of organised extorsion and membership of a foreign criminal organisation," according to the federal police and the Frankfurt public prosecutor's office in charge of combatting cybercrime.
German authorities also obtained international arrest warrants for the 20 people, "most of them Russian nationals", and launched search operations, they added.
The crackdown is an extension of Operation Endgame, the largest police operation ever conducted against botnets. A total of €21.2 million was seized during the operation, which began in 2024.
Edited by: Saim Dušan Inayatullah
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
DW
9 hours ago
- DW
EU asked to intervene as US sanctions deal fresh blow to ICC – DW – 06/06/2025
Fresh US sanctions will curb the ICC's capacity to work. With a Slovenian judge on the blacklist, calls for the EU to activate laws to block the sanctions are mounting. It was a consequential case of deja-vu in The Hague on Thursday, as the US issued fresh sanctions against judges at the International Criminal Court (ICC) over what it calls "illegitimate actions targeting the United States and Israel." The move is the latest in a series of diplomatic assaults on the ICC ostensibly aimed at curtailing the court's credibility and ability to function. The ICC has criticized the measure as "a clear attempt to undermine the indepedence of an international judicial institution." While the European Union (EU) has long defended the court as the "cornerstone of international justice," its member states' mixed response to ICC rulings in recent months has exposed cracks in the world's main mechanism for international criminal justice, and its capacity to act. Now calls for the bloc to use legal powers to counter US sanctions are mounting. US Secretary of State Marco Rubio announced the sanctions on Thursday Image: Mehmet Eser/Zuma/Imago Why is the US targeting the ICC? The new measures target four ICC judges. Two were involved in proceeding that led to an ICC arrest warrant against Israeli Prime Minister Benjamin Netanyahu, among others, over alleged crimes and crimes against humanity in Gaza. Israel denies the allegations. The other two blacklisted judges were part of proceedings that authorized probes into alleged war crimes committed by US armed forces in Afghanistan. During Republican President Donald Trump's first term, the US had already targeted Khan's predecessor over an ICC probe into suspected war crimes in Afghanistan. The subsequent administration under President Joe Biden lifted the sanctions, and the ICC then "deprioritized" alleged US violations in its Afghanistan investigation in 2021. Thursday's new sanctions come on top of measures announced against the court's top prosecutor, Karim Khan, in February. They also come amid turbulent times for the court, with Khan having stepped back last month until a probe into sexual misconduct claims is complete. US citizens and firms are banned from doing business with the sanctioned judges Image: Peter Dejong/AP/picture alliance The ICC was set up in 2002 as a court of last resort to prosecute leaders and other key figures for atrocities when justice cannot, or will not, be served in their own countries. More than 120 nations, including all EU member states, voluntarily signed up to the international treaty which established the court. But China, Russia, the US and Israel are notable non-members — and Washington claims this as the basis for its sanctions. "The ICC is politicized and falsely claims unfettered discretion to investigate, charge, and prosecute nationals of the United States and our allies. This dangerous assertion and abuse of power infringes upon the sovereignty and national security of the United States and our allies," US Secretary of State Marco Rubio said in a statement on Thursday. How will sanctions impact the court? In response, the ICC said that its work "provides justice and hope to millions of victims of unimaginable atrocities." "Targeting those working for accountability does nothing to help civilians trapped in conflict. It only emboldens those who believe they can act with impunity," the court added. Under the sanctions, US businesses and citizens are banned from providing funds, goods or services to the blacklisted judges. Any assets they hold in the US are also frozen. But the implications don't stop there. The Associated Press wrote last month that the ICC's chief prosecutor had lost access to his emails and seen his bank accounts frozen. According to the report, these businesses had discontinued their services out of fear of being targeted by US authorities for supporting blacklisted indivduals. Some non-governmental organizations also reportedly stopped working with the court. Slovania has called on the EU to activate its so-called blocking statute after the US sanctioned a Slovenian judge Image: Yves Herman/REUTERS/REUTERS EU urged to activate laws to block sanctions The European Union said on Friday that it "deeply regrets" the US move and vowed to continue backing the ICC. But some hope the EU will take tougher action. Back in the 1990s, the EU laid out laws known as its "blocking statute" aimed at cushioning the extraterritorial blow of US measures. The legislation bans EU firms from complying with US sanctions the bloc deems illegal, and was designed to prevent US restrictions on Cuba from wiping out European trade with the country. The laws were later updated to include US sanctions on Iran. Now, Slovenia and Belgium are leading a call for the bloc's executive to activate the same laws against the newest US sanctions against the ICC. Slovenian judge Beti Hohler is among those on Washington's blacklist. Asked on Friday whether the European Commission would grant Slovenia's ask, spokesperson Olof Gill told reporters: "All we can do right now is closely monitor the implications before we decide any next steps." While it's up to the European Commission to determine if, how, and when it extends the blocking statute, Brussels will likely be weighing the potential political ramifications — and whether there is enough unity among EU capitals to back the move. An existential crisis at the ICC? It's a recurring theme, as EU member states are not on the same page about the ICC. While the central executive in Brussels regularly styles the bloc as the court's biggest backer, EU countries' actions tell a more complex story — one that adds to a growing sense that the court's future is full of uncertainty. Unlike national judiciaries, the ICC has no police service. Instead, it relies on members to hand over suspects who arrive on their territory. "The ICC is famously described as a giant without arms and legs — it cannot really enforce those arrest warrants. It's up to the political will of states," international criminal law lecturer Mathjiy Holvoet told DW earlier this year. In early 2025, Italy failed to arrest a Libyan police chief wanted by the ICC for alleged war crimes. Libya is seen as a crucial partner in Italy's bid to cut down irregular migration. Earlier this month, Hungary withdrew from the court after rolling out the red carpet for Netanyahu in apparent defiance of the ICC's arrest warrant. Hungary to withdraw from International Criminal Court To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video Though other EU governments have issued statements of support for the ICC, several among them have also indicated Netanyahu would not be arrested should he visit their country. France has suggested the Israeli prime minister has immunity because Israel is not an ICC member, and Germany's chancellor said in February he would "find ways" to allow Netanyahu travel to Berlin. Edited by: Maren Sass
DW
16 hours ago
- DW
German activist Maja T. goes on hunger strike in Hungary – DW – 06/06/2025
German anti-fascist activist Maja T., has been held in isolation in a Hungarian prison for one year now. The case highlights the state of the rule of law in Victor Orban's Hungary. "I can no longer endure the prison conditions in Hungary. My cell was under round-the-clock video surveillance for over three months. I always had to wear handcuffs outside my cell for over seven months," reads Maja T.'s statement. The non-binary German activist went on a hunger strike on June 5. "Non-binary" refers to individuals who identify as neither exclusively female nor male. People like Maja T.* generally have a hard time in Hungary, although it is a member state of the European Union (EU), which has anti-discrimination provisions. In 2021, Hungary first made legislative amendments to multiple laws, targeting LGBTQ+ individuals. In early 2025, under Viktor Orban's authoritarian rule, Hungary passed a law that can be used to ban Pride and similar events. At the start of the trial in Budapest, Maja T. was led into the courtroom on a leash Image: Denes Erdos/AP/dpa/picture alliance No hope of a fair trial Maja T. has long given up hope of a fair criminal trial and wants to use the hunger strike to force a return to Germany. In June 2024, T. was extradited from Germany to Hungary and has been in solitary confinement in a Budapest prison ever since. The activist's trial began there on February 21. The public prosecutor's office accuses the prisoner from Jena in Germany's eastern state of Thuringia of assaulting and seriously injuring several people in Budapest in February 2023. The victims had taken part in the so-called "Day of Honor," an annual march by neo-Nazis from all over Europe. At the start of the criminal proceedings, T. was led into the courtroom in handcuffs and shackles and on a leash. The public prosecutor's office offered T. the opportunity to enter a guilty plea and accept 14 years in prison without further proceedings. However, T. declined and instead made a six-page statement with clear criticism of Hungary: "It is a state that quite openly marginalizes and separates people because of their sexuality or gender. I am accused by a European state because I am an anti-fascist." T. did not comment on the content of the charges — multiple counts of grievous bodily harm. Maja T. could now face up to 24 years in prison under Hungarian law. A sentence passed by a German court is likely to be much more lenient. Hungary amends constitution to curb LGBTQ+ rights To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video Extradition to Hungary was unlawful What makes the case particularly controversial is that T.'s extradition from Germany to Hungary was unlawful. This was ruled by the Federal Constitutional Court at the end of January. It expressly referred to the Charter of Fundamental Rights of the European Union (EU) and the associated ban on inhumane treatment. The court listed: Inadequate hygiene conditions, lack of access to hot water, bedbugs, poor and little food, extreme temperatures in winter and summer, poor lighting and ventilation in the cells, violence against prisoners by fellow prisoners and prison staff, and rule of law deficits. The Berlin Court of Appeal is responsible for the unlawful extradition. The Constitutional Court accuses the appeals court of ignoring current information on overcrowding and prison conditions in Hungarian prisons. A 'political trial' However, the successful constitutional complaint came too late: Maja T. had already been extradited. Maja T.'s father, Wolfram Jarosch, traveled to Budapest at the start of the trial to offer his 24-year-old child moral support. On the phone with DW, he described the criminal proceedings as a "political trial." "The worst thing is the solitary confinement," Jarosch said. However, he is impressed by his child's self-discipline: Physical exercise, reading and writing according to a daily and weekly schedule. "Nevertheless, I ultimately notice that Maja is suffering more and more under these conditions, both mentally and physically," he added. There have been demonstrations in Germany in support of Maja T. Image: Markus Scholz/dpa/picture alliance Several members of Germany's socialist Left Party are taking a keen interest in Maja T.'s case. Carola Rackete, Member of the European Parliament, has already visited twice and was able to talk to the security staff about the conditions of detention. She was told that the solitary confinement had been ordered "from above," she told DW. While the other inmates are housed in multi-bed cells and have communal access to the yard, Maja T. is in solitary confinement, allegedly because of her non-binary identity. Rackete believes it is unlikely that this will change. The MEP calls on German Chancellor Friedrich Merz and the German government to exert pressure on Hungary: If you seriously want to distance yourself from right-wing extremists and stand up for democratic values, you cannot stand idly by while Orban's regime destroys human lives in Hungarian courts, Rackete argues. No further extradition of suspected left-wing extremists Six suspected left-wing extremists, who had been in hiding and are also believed to have been involved in the attacks on suspected neo-Nazis in Budapest in 2023, were luckier than Maja T. The group voluntarily handed themselves in to the German authorities in January. They apparently do not have to fear extradition to Hungary, as the Federal Public Prosecutor's Office confirmed to DW on request. Accordingly, the public prosecutors responsible for the extradition proceedings were informed in writing that the investigations in Germany have priority. This means that, should charges be brought, the proceedings would take place in Germany. *Editor's note: DW follows the German press code, which stresses the importance of protecting the privacy of suspected criminals or victims and urges us to refrain from revealing full names in such cases. This article was originally written in German. While you're here: Every Tuesday, DW editors round up what is happening in German politics and society. You can sign up here for the weekly email newsletter, Berlin Briefing.
DW
3 days ago
- DW
Fact check: How credible is Russian Fact-check Site GFCN? – DW – 06/04/2025
Russia's new "Global Fact-Checking Network" (GFCN) claims to fight fake news — but experts criticise it as propaganda in fact-checking clothes. Who's behind GFCN and why does it not meet global fact-checking standards? In early April, Russia's Ministry of Foreign Affairs unveiled the Global Fact-Checking Network (GFCN) — a self-proclaimed international alliance of fact-checkers and media outlets. The initiative was first presented at the "Dialogue about Fakes 2.0" forum in Moscow in November 2024. At a press briefing following the April announcement, Russian foreign ministry spokeswoman Maria Zakharova framed the GFCN as a counter to what she called the West's "relentless stream of fake stories and disinformation campaigns, " accusing Western fact-checkers of engaging in "biased pseudo-fact-checking." "This global civic initiative," Zakharova said, "will enable us to counter destructive Western actions using our own constructive agenda." But established fact-checking sites such as Facta and Maldita have raised red flags over the GFCN's Kremlin-aligned backers, opaque operations, and overtly one-sided narratives. DW Fact check takes a closer look. Who's behind the GFCN? The GFCN was co-founded by TASS, Russia's state-run news agency, and the Autonomous Non-Profit Organization (ANPO) "Dialog Regions" — both known for their close ties to the Kremlin. TASS was suspended in 2022 by the European Alliance of News Agencies (EANA) over concerns about its editorial independence. In 2023, the European Union sanctioned ANPO "Dialog Regions" for its role in spreading disinformation and for operating the pro-Kremlin website War on Fakes. Ahead of Russia's 2024 presidential election, the US Treasury also sanctioned the group under Executive Order 14024, targeting individuals and entities linked to the Russian government. Does the GFCN meet global fact-checking standards? Independent fact-checking relies on transparency, verifiable sourcing, and open methodologies. Leading organizations such as the International Fact-Checking Network (IFCN) require fact-checks to cite public data and provide transparent methods that others can replicate. DW reviewed several GFCN articles and found consistent problems with sourcing and methodology. In one article titled "The Romanian Elections: How Did the West Win Only on the Second Try?" , the author cites the 2024 Eurobarometer, claiming only 22% of Romanians support aid to refugees, only 14% back the EU's actions on Ukraine, and only 13% favor Ukraine's EU candidate status. But these figures are false. DW cross-checked the data and found significantly higher levels of Romanian support for EU policies on Ukraine in the 2024 Eurobarometer, contradicting the article's core claim. Another piece alleges that the Soros family was the "shadow organizer" behind the "HANDS OFF!" protests against US President Donald Trump's second administration, which took place across the United States on April 5, 2025. The article argues that, since some organizers had previously received grants from the Open Society Foundations, the Soros family must have orchestrated the protest. That's misleading. The piece focuses narrowly on two groups — MoveOn and Indivisible — and ignores the broader coalition behind the rallies. While both organizations have indeed received funding from Open Society Foundations, the grants supported general programming, not the April 5 protests specifically. Moreover, these groups list dozens of funders, not just the Soros-backed foundation. Receiving support from Open Society Foundations doesn't prove direct involvement on the part of the Soros family, whose philanthropic work has long been targeted by conspiracy theorists. These narratives often paint Soros as a puppet master behind protests, migration, or global unrest — claims that have been widely discredited. Another GFCN article titled "Is ChatGPT Prone to Russian Propaganda?" fails to seriously engage with the question it raises. Instead, it spends most of its word count defending TASS and attacking a Norwegian media outlet that questioned the Russian agency's credibility. The article barely mentions recent investigations — such a report by NewsGuard, which DW covered — which document Russian attempts to manipulate generative AI platforms. The piece's only conclusion appears in the final paragraph, which vaguely states: "It is incorrect to give a chatbot human qualities and accuse it of 'preferring' one of the sources to the others." GFCN: Who is writing these stories? One contributor to the GFCN is Sonja van den Ende, a Dutch journalist living in Russia who has been embedded with Russian troops in Ukraine. Some Dutch media have described her as a conspiracy theorist. On X, she recently posted : "Germany is the country of knife pullers, used to be a country of beer and bratwurst, now asylum seekers, i.e. radicalized rebels from Syria, Iraq etc." Other GFCN contributors include Tim Anderson, director of the Centre for Counter Hegemonic Studies. He has called the massacre of Ukrainian civilians in Bucha a "scam" and falsely claimed that Russia's invasion of Ukraine did not involve the targeting of civilian infrastructure. Russian propaganda: Deepfake videos tougher to detect To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video A familiar Russian playbook: mimic and confuse Observers say the GFCN's name — just one letter removed from the IFCN — is no accident. The International Fact-Checking Network, founded in 2015 by the Poynter Institute, is a respected consortium of more than 150 independent fact-checkers worldwide. It trains journalists, enforces professional standards, and certifies outlets based on transparency and editorial independence. The GFCN, on the other hand, appears to follow a long-standing tactic of the Russian state: imitating legitimate institutions to blur the line between journalism and propaganda. "We do not consider their activities to fall within the professional fact-checking ecosystem," IFCN director Angie Drobnic Holan told DW, citing Russia's consistent suppression of independent journalism and reliance on state-run entities to promote its political agenda. "Professional fact-checking requires the ability to independently verify claims across the political spectrum," she said. "Journalists must be free to publish findings that contradict the government. We are highly dubious that this effort allows for that." Tommaso Canetta, a policy officer with the European Digital Media Observatory (EDMO), called the GFCN a classic case of political appropriation. "This is a tactic we've seen many times; co-opting terms with credibility, like 'fact-checking,' and stripping them of meaning," he explained. "Political actors often label partisan narratives as 'fact checks' when they clearly are not." He stressed that affiliations with networks like the IFCN or the European Fact-Checking Standards Network (EFCSN) help distinguish legitimate outlets from those engaged in manipulation. "Without such standards, we end up with initiatives — like this one from Russia — that pollute the term and muddy the waters." This article was written and edited by the DW Fact Check team.
