Australian Signals Directorate Disrupts Amadey Malware Infrastructure
Amadey malware
The Australian Signals Directorate gained access to the backend infrastructure of the Amadey malware operation, cutting off attacker access to 180,000 infected computers worldwide. The intervention effectively neutralizes the current threat from these infected endpoints.
why this severityConfirmed disruption of a major malware backend affecting thousands of systems.
- first report
- 27 Oct 2026
- last update
- 27 Oct 2026
Timeline · 1
Sources · 1
News and write-ups
- 2026-10-27Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected ComputersThe Hacker News · thehackernews.com/2026/10/australia-gets-into-amadey-malware.html
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- No AI role
- categories
- General security
- severity
- 3 · Confirmed exploitation
- targets
- Individuals
- owasp llm top 10
- no entry for these categories
- mitre atlas
- no technique for these categories
- dates
- happened 27 Oct 2026 · first reported 27 Oct 2026
- origin
- News & research feeds
- record
- confidence 0.90 · created 2026-10-27 15:31Z · updated 2026-11-11 00:12Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Australian Signals Directorate Disrupts Amadey Malware Infrastructure https://gcdradar.vercel.app/incidents/australian-signals-directorate-disrupts-amadey-malware-infra · AIR-2026-1578 · closed 2026-11-10 - Lane: Breaches & attacks - Severity: 3 (Confirmed exploitation): Confirmed disruption of a major malware backend affecting thousands of systems. - Fix status: No fix needed - First reported: 2026-10-27 - AI role: No AI role - Products: Amadey malware ## Summary The Australian Signals Directorate gained access to the backend infrastructure of the Amadey malware operation, cutting off attacker access to 180,000 infected computers worldwide. The intervention effectively neutralizes the current threat from these infected endpoints. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-10-27: Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers (https://thehackernews.com/2026/10/australia-gets-into-amadey-malware.html) ## Sources - 2026-10-27 The Hacker News: Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers https://thehackernews.com/2026/10/australia-gets-into-amadey-malware.html Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveWARDEN Stealer distributed via fake Grand Theft Auto VI download links
Breaches & attacks · Exploited · since 13 Nov 2026
- liveZoom North Korean hackers steal $400M via fake Zoom and Teams video calls
Breaches & attacks · Real loss · since 12 Nov 2026
- liveBinance US seizes North Korean hacking infrastructure linked to Binance theft
Breaches & attacks · Real loss · since 13 Nov 2026
- liveExtortion Group Luna Moth Targets Law Firms With Microsoft Token Theft
Breaches & attacks · Exploited · since 12 Nov 2026
- liveFaceTime Iran-backed Network Directed Attacks on European and US Sites
Breaches & attacks · Real loss · since 11 Nov 2026
- liveSparrow Malware Three China-Nexus Espionage Campaigns Linked to Sparrow Malware
Breaches & attacks · Exploited · since 10 Nov 2026