Operation Endgame focussed on an international and integral approach of the botnet phenomenon facilitating in initial access for ransomware. During our action week, the command and control infrastructure of multiple botnets has been taken offline, victims were disinfected and notified, and multiple suspects were arrested. In the investigation into this phenomenon we focused on combining policy and operation, such as with victim notifications, sanctions and alternative actor-focused interventions. In this presentation, we will take you along in the complexity of combatting multiple botnets at scale, as well as in the most important insights and lessons learned of this operation!
Menu
