Greek police have arrested the alleged mastermind of the massive Venom RAT malware network. The arrest was part of Operation Endgame, a major international cybercrime crackdown coordinated by Europol.
This operation, which ran from November 10-13, 2025, targeted several major cybercrime tools like the VenomRAT remote access Trojan and the Rhadamanthys infostealer.
Europol stated that the dismantled malware infrastructure consisted of hundreds of thousands of infected computers containing several million stolen credentials. Many of the victims were not aware of the infection in their systems.
The main suspect behind the infostealer had access to over 100,000 crypto wallets belonging to these victims, potentially worth millions of euros.
Global operation against the VenomRAT malware network
Europol facilitated the information exchange and provided analytical, crypto-tracing and forensic support to the investigation. To support the coordination of the operation, Europol organised and coordinated calls with all the countries as well as an operational sprint at its headquarters.
Over 100 law enforcement officers from Australia, Canada, Denmark, France, Germany, Greece, the Netherlands and the United States supported the coordination of the operational actions from the command post at Europol.
The command post facilitated the exchange of intelligence on seized servers, suspects, and the transfer of seized data. Eurojust also assisted with the execution of a European Arrest Warrant and European Investigation Orders.
Related: Greece Launches Intelligence Recruitment Drive Starting with 30 Hackers
