Operation Endgame 3.0

DISCLOSED 2025-11-13 · MALWARE · 2,046,030 RECORDS EXPOSED

Between 10 and 13 November 2025, the latest phase of Operation Endgame was coordinated from Europol's headquarters in The Hague. The actions targeted one of the biggest infostealer Rhadamanthys, the Remote Access Trojan VenomRAT, and the botnet Elysium, all of which played a key role in international cybercrime. Authorities took down these three large cybercrime enablers...

The record

What we know

Disclosed

2025-11-13

Attack vector

Malware

Records exposed

2,046,030

Data classes exposed

Email addressesPasswords

ENDPOINT INVOLVED

Sources

Cited reporting

↗ Have I Been Pwned (2025-11-13)

Similar vector · recent

Other malware breaches on file

This page is the permanent ColdRecon entry for the Operation Endgame 3.0 disclosure. It updates if new public reporting emerges. All tracked breaches →

Operation Endgame 3.0 just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →