Law enforcement agencies from ten countries conducted a coordinated operation called “Operation KillSwitch” on September 30 to dismantle the KillSec ransomware gang. The operation resulted in the seizure of the group’s data leak site and servers, the arrest of three suspects, and the identification of a 16-year-old as the gang’s alleged main administrator. Investigators searched eight properties across Greece, Romania, Spain, and the United Kingdom while also targeting the group’s criminal proceeds. The investigation, led by German authorities, identified suspects believed to hold roles as an administrator, developer, negotiator, and affiliate within the cybercrime organization.
KillSec has been active since approximately 2024, exploiting software vulnerabilities and poorly secured devices to breach corporate systems and steal data for extortion purposes. Authorities determined that approximately 500 of the group’s attacks were successful, with at least 70 linked to German organizations. During the operation, law enforcement seized roughly 110 terabytes of stolen data and shut down five servers. Investigators discovered that group members used artificial intelligence to build their ransomware infrastructure and identify potential victims. The examination of seized evidence continues as authorities work to trace criminal proceeds, including cryptocurrency, and identify additional victims and perpetrators.
Source: Read the full story at BleepingComputer
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
