Operation Endgame 3.0 is here! This phase targets the notorious information and credential stealer #Rhadamanthys. It's another major international effort that’s seen 1,025 servers taken down and 20 domains seized. 💪 👏 Excellent work by @npub1fg22...yfva and all partners involved — the takedown of Rhadamanthys marks a significant win for the global cybersecurity community. As with earlier phases of #OperationEndgame, Spamhaus is providing remediation support. Those affected will be contacted in due course with guidance on next steps. Operation Endgame website 👉

Operation Endgame

Operation endgame

Europol press release ⤵️

Europol

End of the game for cybercrime infrastructure: 1025 servers taken down – Operation Endgame’s latest phase targeted the infostealer Rhadamanthys, Remote Access Trojan VenomRAT, and the botnet Elysium | Europol

Between 10 and 14 November 2025, the latest phase of Operation Endgame was coordinated from Europol’s headquarters in The Hague. The actions ...

Got a new IP or domain? You'll want to make sure it’s nice and warm before sending! 📨 Get the details on: - When an IP is considered “new” ✨ - What it means to warm up your IP and domain, how to do it, and how it impacts your sending reputation - Why we strongly discourage using warm-up services 🙅 Read the full FAQ here ➡️

FAQs | Sending marketing emails - advice for marketers

#Email #Sender #WarmUp

my-oh-MYNIC it's not been a great six months…since loosening restrictions for the 🇲🇾 .my ccTLD in late 2024, new domain registrations have sky-rocketed - and so have listings… Between April and September 🇲🇾 .my saw a +543% increase, ranking #3 in the Top 20 ccTLDs! 😱 Get the full story the latest Domain Report here 👇

Report | Domain Reputation Update Apr - Sept 2025 | Spamhaus Project

#ccTLD #DomainReputation

Like all other internet abuse, bulletproof hosting does not just happen - it is enabled by facilitators such as network carriers, datacenter operators, IP brokers and domain registrars. Sometimes, malicious infrastructure agglomerates in the internet vicinity of such facilitators - why not join the show if your criminal competitors thrive there already?🧐 A particularly prolific example is 🇩🇪aurologic GmbH (regular readers might recognize the name), as highlighted by Recorded Future in a report published on November 6 ⤵️

Malicious Infrastructure Finds Stability with aurologic GmbH

This investigative report reveals how German hosting provider aurologic GmbH has become a central enabler of malicious internet infrastructure, lin...

#Cybercrime #BulletproofHosting #ThreatIntel #HostingProviders

If you keep a close eye on the DNS abuse landscape, you’ve probably noticed a rise in malicious activity and abuse reports linked to Traffic Distribution Systems (TDS) — infrastructure that’s fast becoming a go-to tool for phishing and other malicious campaigns. Earlier this year, our peers at Infoblox shared over 100,000 domains tied to Vextrio, a threat actor group notorious for its extensive TDS use. Needless to say, those domains are listed on the Spamhaus Domain Blocklist 💪 ⤵️

❗Here's the latest Spamhaus DROP listings, from the worst of the worst IP traffic: 👉 SBL688496 - https://check.spamhaus.org/results?query=SBL688496 👉 SBL683400 - https://check.spamhaus.org/results?query=SBL688400 👉 SBL688345 - https://check.spamhaus.org/results?query=SBL688345 👉 SBL688338 - https://check.spamhaus.org/results?query=SBL688338 👉 SBL679050 - https://check.spamhaus.org/results?query=SBL679050 👉 SBL688313 - https://check.spamhaus.org/results?query=SBL688313 👉 SBL683028 - https://check.spamhaus.org/results?query=SBL683028 👉 SBL688302 - https://check.spamhaus.org/results?query=SBL688302 👉 SBL688281 - https://check.spamhaus.org/results?query=SBL688281

Go on… drop your spam in here. We dare you 🕷📬 #CreepItClean