Australian Signals Directorate cuts criminal access to 180,000 computers infected with Amadey malware
- Severity
- Medium
- Sources
- 2
What happened
ASD operators accessed the backend of an Amadey malware operation and severed the connection between that controller and about 180,000 infected hosts globally, including some in Australia. The criminal operator is reported to have lost the ability to access the victims or exfiltrate data. The excerpts provided do not give CVE IDs, indicators of compromise, affected versions or remediation guidance, and do not say whether the infections themselves were removed, so defenders should not assume the malware is gone from affected hosts. Organisations should still check for Amadey infections and treat any compromised systems as needing investigation.
For security analysts · Written by AI from 2 sources · Wrong?
What to do
- Keep devices updated and install software only from official stores or the maker’s site.
General advice for this kind of story
Full story timeline · 2 updates
Who reported · 2 outlets
Who and what is in it
Malware
Companies