Operation "Endgame": How Europol and ELAS arrested the mastermind of an international cyberattack network in Attica

The arrest was made as part of the international operation “Endgame”, which was coordinated from November 10 to 14, 2025 and aimed to shut down infrastructure responsible for infecting thousands of computers with malware. The suspect allegedly offered RAT (Remote Access Trojan) software via an online platform, with the aim of stealing personal data and cryptocurrencies from his victims.

During the search of his home, with the participation of FBI representatives, the authorities seized evidence linking the arrested person to criminal activities in cyberspace, such as 11 debit cards, amounts of money in cryptocurrencies, hard drives, mobile phones and other technical tools used for the development and distribution of the malicious software.
Operation “Endgame”: How Europol and ELAS arrested the mastermind of an international cyberattack network in Attica

Operation “Endgame”, which involved authorities from 10 countries and was coordinated by Europol and Eurojust, aimed to limit the spread of malicious software and dismantle international infrastructures that facilitated the commission of cybercrimes on a global scale.

The operation's actions included cutting off access to 1,025 servers and seizing 20 domains, which were used by criminal networks to extract data and blackmail their victims.
Operation "Endgame": How Europol and ELAS arrested the mastermind of an international cyberattack network in Attica

The 38-year-old arrested is accused of a series of offenses, such as trafficking in malicious software (RAT), illegal access to computer systems and violation of the confidentiality of communications. He also faces charges for managing illegal websites, through which he offered malicious software to users who paid for monitoring and data theft.