Headlines

Greece arrests man in Europol's global 'Endgame' operation against cybercrime

Published by Global Banking & Finance Review

Posted on November 14, 2025

2 min read

· Last updated: January 21, 2026

Add as preferred source on Google
Greece arrests man in Europol's global 'Endgame' operation against cybercrime
Global Banking & Finance Awards 2026 — Call for Entries

ATHENS (Reuters) -Greece has arrested a 38-year-old man as part of a Europol crackdown on international cybercrime, during which authorities dismantled malware infrastructure that has infected

Greek Authorities Arrest Cybercriminal Linked to Europol's Operation Endgame

Europol's Global Crackdown on Cybercrime

ATHENS (Reuters) -Greece has arrested a 38-year-old man as part of a Europol crackdown on international cybercrime, during which authorities dismantled malware infrastructure that has infected hundreds of thousands of computers worldwide, police said.

Details of the Malware Infrastructure

The pan-European law enforcement cooperation agency Europol said on Thursday that in the latest phase of "Operation Endgame" across 10 countries, including the United States, it targeted infostealers Rhadamanthys, the Remote Access Trojan VenomRAT and the botnet Elysium.

Arrest and Evidence Found

The malware infrastructure dismantled this week consisted of hundreds of thousands of infected computers containing several million stolen credentials, Europol said. Many of the victims did not know that their systems were infected.

Impact on Victims and Authorities

In total, 1,025 servers were taken down or disrupted worldwide and 20 domains were seized.

The man, an Albanian national arrested in Athens on November 3, is allegedly the creator and seller of VenomRAT since 2020, Greek police officials said. He was detained on a European arrest warrant issued by France.

"The main suspect behind the infostealer had access to over 100,000 crypto wallets belonging to these victims, potentially worth millions of euros," Europol said.

Greek police said that the malware was designed to steal information through keystroke recording and the remote use of web cameras, text infiltration and cryptocurrency wallet hacking. The price for its use ranged from 150 euros a month to 1,550 euros a year.

After searching the man's residence they said they found versions of malware source code, evidence pointing to the management of a website promoting the malware, suspicious emails and cryptocurrency accounts.

They have confiscated seven hard drives, three USB sticks and a digital wallet with cryptocurrencies worth $140,424 among other items, police said in a statement.

A Greek police official said that the digital infrastructure for the operation of the malware was hosted on a server of a company based in France, while French and U.S. authorities have also launched investigations.

(Reporting by Renee Maltezou and Yannis Souliotis; Editing by Emelia Sithole-Matarise)

Key Takeaways

  • Greece arrested a man linked to Europol's cybercrime crackdown.
  • Operation Endgame dismantled malware affecting global systems.
  • The suspect allegedly created and sold VenomRAT malware.
  • Authorities seized digital assets and evidence from the suspect.
  • The operation involved cooperation across 10 countries.

Frequently Asked Questions

What is cybercrime?
Cybercrime refers to illegal activities conducted via the internet or computer networks, including hacking, identity theft, and the distribution of malware.
What is malware?
Malware is malicious software designed to harm, exploit, or otherwise compromise computer systems, including viruses, worms, and Trojans.
What is cryptocurrency?
Cryptocurrency is a digital or virtual currency that uses cryptography for security and operates on decentralized networks based on blockchain technology.
What is an infostealer?
An infostealer is a type of malware specifically designed to gather sensitive information from a victim's computer, such as passwords and credit card details.
What is a botnet?
A botnet is a network of compromised computers controlled by a hacker, often used to perform coordinated tasks like sending spam or launching attacks.

Tags

Related Articles

More from Headlines

Explore more articles in the Headlines category