{"id":461,"date":"2025-11-24T10:57:00","date_gmt":"2025-11-24T13:57:00","guid":{"rendered":"https:\/\/boasvindas.engdb.com.br\/?p=461"},"modified":"2026-04-06T12:18:54","modified_gmt":"2026-04-06T15:18:54","slug":"recent-cybercrime-countermeasures-and-implications-for-corporate-security","status":"publish","type":"post","link":"https:\/\/boasvindas.engdb.com.br\/?p=461","title":{"rendered":"Recent cybercrime countermeasures and implications for corporate security"},"content":{"rendered":"<p data-ogsc=\"\"><span data-ogsc=\"\" data-olk-copy-source=\"MessageBody\">On one side,\u00a0criminals<\/span>, increasingly aided by AI.<br \/>\n<span data-ogsc=\"\">On the other, international\u00a0law enforcement agencies<\/span>, more united and specialised than ever.<br \/>\n<span data-ogsc=\"\">At the centre, the digital and economic\u00a0assets\u00a0of companies and individuals<\/span>: billions of stolen passwords, millions of systems breached and exploited at will by criminals.<\/p>\n<p data-ogsc=\"\">As part of our ongoing commitment to raising awareness on cybersecurity, we draw your attention to the results of\u00a0<span data-ogsc=\"\">\u201cOperation Endgame\u201d<\/span>, an\u00a0<span data-ogsc=\"\">international initiative to fight cybercrime<\/span>, coordinated by\u00a0<span data-ogsc=\"\">Europol<\/span>.<\/p>\n<p data-ogsc=\"\"><span data-ogsc=\"\"><a dir=\"auto\" title=\"https:\/\/www.operation-endgame.com\/\" href=\"https:\/\/www.operation-endgame.com\/\" data-auth=\"NotApplicable\" data-linkindex=\"7\" data-ogsc=\"rgb(38, 139, 206)\">Operation Endgame<\/a><\/span>\u00a0was launched in 2024 by a task force comprising Europol, private technology companies, and six European states, joined by the USA, Canada, and Australia. Its goal is to dismantle the activities of cybercriminal organisations by shutting down their infrastructures and seizing the data they have stolen.<\/p>\n<p data-ogsc=\"\">In\u00a0<span data-ogsc=\"\"><a dir=\"auto\" title=\"URL original: https:\/\/engit.sharepoint.com\/sites\/Engage\/_layouts\/15\/embed.aspx?UniqueId=786e28df-15bf-4937-ae76-353c0804e78f. Clique ou toque se voc\u00ea confiar neste link.\" href=\"https:\/\/engit.sharepoint.com\/sites\/Engage\/_layouts\/15\/embed.aspx?UniqueId=786e28df-15bf-4937-ae76-353c0804e78f\" data-auth=\"NotApplicable\" data-linkindex=\"8\" data-ogsc=\"rgb(38, 139, 206)\">this video published on Engage<\/a><\/span>, a brief overview of the main results achieved by Europol in recent years, before and after the launch of Operation Endgame.<\/p>\n<p data-ogsc=\"\"><span data-ogsc=\"\">The most recent phase of the operation<\/span>, called \u201cEnd of the game for cybercrime infrastructure\u201d,\u00a0<span data-ogsc=\"\">took place from 10 to 13 November 2025<\/span>\u00a0and resulted in the dismantling of a large criminal infrastructure. Law enforcement neutralised\u00a0<span data-ogsc=\"\">1,025 servers<\/span>\u00a0supporting three major international cybercrime enablers:<\/p>\n<ul data-ogsc=\"\">\n<li data-ogsc=\"\"><span data-ogsc=\"\">Rhadamanthys<\/span>: a massive infostealer (information-stealing software)<\/li>\n<li data-ogsc=\"\"><span data-ogsc=\"\">VenomRAT<\/span>: a Remote Access Trojan (RAT)<\/li>\n<li data-ogsc=\"\"><span data-ogsc=\"\">Elysium<\/span>: a botnet.<\/li>\n<\/ul>\n<p data-ogsc=\"\">The main suspect linked to VenomRAT was arrested in Greece on 3 November 2025. Other individuals under investigation have been identified as part of the \u201cEU Most Wanted\u201d list.<\/p>\n<p data-ogsc=\"\"><span data-ogsc=\"rgb(198, 25, 139)\">Impact and relevance for our security<\/span><\/p>\n<p data-ogsc=\"\"><span data-ogsc=\"inherit\">The dismantled infrastructure was responsible for infecting systems of\u00a0hundreds of thousands of victims worldwide, many of whom were unaware. The stolen data included\u00a0millions of compromised credentials\u00a0and\u00a0over 100,000 cryptocurrency wallets, with a potential value of millions of euros.<\/span><\/p>\n<p data-ogsc=\"\"><span data-ogsc=\"\">The cause of these infections was always the same: execution of malicious software originating from untrusted websites or media.<\/span><\/p>\n<p data-ogsc=\"\"><span data-ogsc=\"\">How to prevent these attacks<\/span><\/p>\n<p><span data-ogsc=\"inherit\">By following the recommendations outlined in company policies and frequent communications, in particular:<\/span><\/p>\n<ul data-ogsc=\"\">\n<li data-ogsc=\"inherit\"><span data-ogsc=\"inherit\">Install software only from official sources\u00a0and with prior authorisation<\/span><\/li>\n<li data-ogsc=\"inherit\"><span data-ogsc=\"inherit\">Store passwords and other credentials\/secrets in the\u00a0official Engineering Group\u00a0Password Manager\u00a0(see\u00a0<a dir=\"auto\" title=\"https:\/\/engage.eng.it\/en\/internal-communications\/check-out-the-official-eng-group-password-manager\" href=\"https:\/\/engage.eng.it\/en\/internal-communications\/check-out-the-official-eng-group-password-manager\" data-auth=\"NotApplicable\" data-linkindex=\"9\" data-ogsc=\"rgb(38, 139, 206)\">Engage<\/a>)<\/span><\/li>\n<li data-ogsc=\"inherit\"><span data-ogsc=\"inherit\">Do not use company PCs and accounts for\u00a0non-work-related activities<\/span><\/li>\n<li data-ogsc=\"inherit\"><span data-ogsc=\"inherit\">Keep\u00a0installed\u00a0software up to date.<\/span><\/li>\n<\/ul>\n<p data-ogsc=\"\"><span data-ogsc=\"inherit\">For more details on these and other important measures, visit\u00a0<a dir=\"auto\" title=\"https:\/\/engage.eng.it\/en\/internal-communications\/6-key-steps-to-disarm-cyber-criminals\" href=\"https:\/\/engage.eng.it\/en\/internal-communications\/6-key-steps-to-disarm-cyber-criminals\" data-auth=\"NotApplicable\" data-linkindex=\"10\" data-ogsc=\"rgb(38, 139, 206)\">this page on Engage<\/a>.<\/span><\/p>\n<p data-ogsc=\"\"><span data-ogsc=\"rgb(198, 25, 139)\">AI-driven attacks: when the hacker is an algorithm<\/span><\/p>\n<p data-ogsc=\"\"><span data-ogsc=\"inherit\">Despite the dismantling of major malicious actors, criminal organisations continue to grow and evolve, thanks to the widespread adoption of artificial intelligence.<\/span><\/p>\n<p data-ogsc=\"\"><span data-ogsc=\"inherit\">Recently, the\u00a0first large-scale attack carried out almost entirely through AI\u00a0has been made public (news from\u00a0<a dir=\"auto\" title=\"https:\/\/www.anthropic.com\/news\/disrupting-AI-espionage\" href=\"https:\/\/www.anthropic.com\/news\/disrupting-AI-espionage\" data-auth=\"NotApplicable\" data-linkindex=\"11\" data-ogsc=\"rgb(38, 139, 206)\">Anthropic<\/a>\u00a0and\u00a0<a dir=\"auto\" title=\"https:\/\/www.euronews.com\/next\/2025\/11\/14\/anthropic-says-chinese-state-backed-hackers-used-its-ai-for-major-cyberattack\" href=\"https:\/\/www.euronews.com\/next\/2025\/11\/14\/anthropic-says-chinese-state-backed-hackers-used-its-ai-for-major-cyberattack\" data-auth=\"NotApplicable\" data-linkindex=\"12\" data-ogsc=\"rgb(38, 139, 206)\">Euronews<\/a>): a spying campaign discovered and blocked by\u00a0Anthropic\u00a0\u2013 creator of the AI \u201cClaude\u201d \u2013 which used\u00a0autonomous AI agents to infiltrate around thirty global targets, including tech companies, financial institutions, and government agencies.<br \/>\n<\/span><span data-ogsc=\"inherit\">The criminal group, believed to be state-sponsored by China, used the Claude Code tool to manage all phases of the offensive: reconnaissance, credential theft, and data exfiltration.<\/span><\/p>\n<p data-ogsc=\"\"><span data-ogsc=\"inherit\">This operation marks a turning point:\u00a0AI is no longer just a support tool, but a direct actor, capable of making attacks faster, more scalable, and harder to detect.<br \/>\n<\/span><\/p>\n<p data-ogsc=\"\"><span data-ogsc=\"inherit\">Anthropic warns that such threats will grow in complexity and effectiveness, making it even more essential for companies and individuals to adopt all preventive measures and remain vigilant to keep their resources safe.<\/span><span data-ogsc=\"inherit\"><br \/>\n<\/span><\/p>\n<p data-ogsc=\"\">Thanks for your collaboration<br \/>\nBest regards<span data-ogsc=\"\"><br \/>\nGroup Information Security Office<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>On one side,\u00a0criminals, increasingly aided by AI. On the other, international\u00a0law enforcement agencies, more united<span class=\"excerpt-hellip\"> [\u2026]<\/span><\/p>\n","protected":false},"author":4,"featured_media":193,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[5,4],"tags":[],"class_list":["post-461","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ia","category-seguranca"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/boasvindas.engdb.com.br\/wp-content\/uploads\/2024\/03\/terra-empresas-seguranca-digital-capa.jpg","_links":{"self":[{"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/461","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=461"}],"version-history":[{"count":1,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/461\/revisions"}],"predecessor-version":[{"id":462,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/461\/revisions\/462"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/media\/193"}],"wp:attachment":[{"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=461"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=461"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=461"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}