German authorities said this week they dismantled more than 100 servers used by the StealC password-stealing malware, the second such action after a June crackdown, The Record reported Thursday¹.

Investigators traced the rebuilt network to Virtualine, a bulletproof hosting provider the FBI seized in October, with assistance from police in Frankfurt and the Dutch National High Tech Crime Unit¹.

Europol said a wider international operation this week disrupted 235 servers and 257 domains used by StealC along with the Gootloader and CastleRAT malware¹.

Investigators uncovered copies of about 6.4 million stolen login credentials from more than 40,000 victims, The Record said, and authorities pointed people to politie.nl/checkyourhack and haveibeenpwned.com to check whether they were affected¹.

No arrests, cryptocurrency seizures or criminal charges accompanied the latest action¹. In June, authorities and Microsoft announced they had dismantled hundreds of servers and domains linked to StealC and other tools and restricted access to 41 million euros (about $47 million) in cryptocurrency¹.

Police from nine countries, including Germany, the Netherlands, Britain and the United States, took part, according to The Record¹. The operation is aimed at tools used widely by cybercriminals, the report said¹.

Carsten Meywirth, head of the cybercrime department at Germany's Federal Criminal Police Office, described a long-term, high-speed approach to cybercrime and said even organized operators should expect coordinated investigations¹.

"Anyone who rebuilds their infrastructure after police action leaves new leads that we will pursue," Meywirth said, according to The Record¹. What happened to StealC's operators after the June action, and whether the latest seizures will last, was not established in the report¹.