International Operation ENDGAME Targets Cybercriminal Infrastructure

Between May 19 and 23, 2025, dismantling actions were carried out against several infrastructures linked to cybercriminal codes as part of Operation ENDGAME, launched in May 2024. This operation involves authorities from Germany, Denmark, France, the Netherlands, the United Kingdom, Canada, and the United States. Mandiant Threat Defense published a study on a campaign conducted by the group UNC6032, linked to Vietnam, which uses fake advertisements for AI tools on social media to entice victims to click on malicious links.