Canada’s CSE Says It Disrupted Extremist, Fentanyl-Trafficking and Ransomware Groups in 2025
Summary
Canada’s CSE says it conducted state-authorized cyber operations in 2025 against an extremist group, fentanyl-chemical traffickers and a ransomware gang, and disrupted infrastructure used by 10 major ransomware gangs.
Key points
- CSE reported three state-authorized active cyber operations targeting a foreign extremist group, overseas traffickers selling fentanyl chemicals, and a ransomware-as-a-service gang.
- CSE said data from internet-connected devices helped undermine the extremist group’s credibility and limit recruitment.
- The agency said its operation against the overseas traffickers disrupted and diminished their activity.
- CSE said signals intelligence helped map a ransomware gang’s operations; the agency reported making its infrastructure inoperable and deleting stolen data advertised for sale.
- CSE also said it carried out technical disruptions against 10 major ransomware gangs to make parts of their infrastructure unusable.
Article Details
- Event Type
- Canada’s Communications Security Establishment (CSE) reported conducting state-authorized active cyber operations in 2025 against an unspecified foreign extremist group, overseas drug traffickers, and a ransomware-as-a-service gang.
- Impact
- CSE said the operations disrupted extremist recruitment, diminished drug-trafficking activity, and made a ransomware gang’s infrastructure inoperable while deleting stolen data advertised for sale on the dark web. It also reported authorized technical disruptions intended to make parts of the infrastructure used by 10 major ransomware gangs unusable.