
The Dutch police, together with international partners, successfully eliminated 1,200 servers that served RedLine and MetaStealer, which specialize in identity theft.
Law enforcement agencies from the Netherlands, United States, Great Britain, Belgium, Portugal and Australia joined forces to take down the RedLine and MetaStealer servers, joining the international Operation Magnus. The special operation led to the arrest of 2 people in Belgium, 1 of whom was not only detained, but the administrator was also charged in the US, and 2 domains were also removed.
RedLine and MetaStealer are malware designed to steal personal information, especially passwords, usernames, and other sensitive data, often distributed via phishing emails and downloads. The Dutch police were able to gain access to the attacker’s entire internal infrastructure, including license servers, control panels, API servers and Telegram bots, to obtain data about the malware’s users, such as name, password, IP address and registration date. Experts estimate that RedLine has stolen more than 17,000 passwords in the past 6 months alone.
RedLine and MetaStealer have become important tools for attackers to harvest personal data that is used or sold on the black market for further attacks. The success of the operation shows that law enforcement officers are able to intervene even in protected environments that were previously considered unreachable.