US Justice Department Disrupts Global Gootloader Malware Network

The United States Department of Justice announced the dismantling of an international cybercrime network responsible for infecting at least 25,000 computers worldwide with Gootloader malware, leading to approximately $28.8 million in losses. The operation, conducted under court authorization by the Justice Department and the Federal Bureau of Investigation (FBI), involved the removal of the malware from over 100 computer servers, including compromised WordPress websites, and the seizure of US domain names used by the cybercriminals.

Gootloader has been active since at least 2018 and has been linked to ransomware attacks against at least 44 US-based victims. Assistant Attorney General A. Tysen Duva stated that the operation disrupted the digital infrastructure used by cybercriminals.

US Attorney Peter McNeilly emphasized the importance of international cooperation in combating cybercrime, while Special Agent Kenneth DeChellis noted that Gootloader targeted victims globally, including the US Department of War and the Defense Industrial Base.