Australian Signals Directorate Disrupts Amadey Malware Backend, Securing 180,000 Infected Computers

According to reports from The Hacker News, the Australian Signals Directorate (ASD) announced that its operators successfully accessed the backend of the Amadey malware operation and severed the connection between the criminal controller and approximately 180,000 infected computers globally. The disruption was executed to prevent further unauthorized access and data theft from the compromised systems.

The ASD stated that by gaining access to the malware's command-and-control infrastructure, they were able to disconnect the criminal operator from the infected machines. This action effectively neutralizes the attackers' ability to remotely control the botnet and exfiltrate sensitive information from the affected computers.

The scope of the operation is global, with confirmed infections in Australia and other regions. The agency emphasized that no software patch was required for this mitigation, as the intervention targeted the malware's operational infrastructure rather than a specific software vulnerability.

As of the publication date, there are no verified reports of active exploitation of the 180,000 systems via the Amadey malware vector following the disruption. The exact technical method used by the ASD to access the backend remains unconfirmed in public reporting.