Authorities Arrest Suspected 16-Year-Old KillSec Ransomware Operator
Summary
A multinational operation arrested three suspects linked to KillSec, which Eurojust says carried out nearly 1,000 attacks. Authorities seized five servers, domains, and at least 110 terabytes of stolen data.
Key points
- Eurojust says KillSec has been active since 2024 and is linked to nearly 1,000 attacks worldwide.
- The group allegedly exploited poorly secured access, particularly access linked to cloud storage, to enter organizations’ systems.
- KillSec allegedly stole data and threatened to publish it unless victims paid; files were reportedly made available for free download when victims did not pay.
- A 16-year-old is suspected of being the group’s administrator and main operator; authorities identified suspects in administrator, developer, negotiator, and affiliate roles.
- The operation resulted in three arrests, eight house searches across four countries, and seizures of five servers, KillSec-operated domains, and at least 110 terabytes of stolen data.
- Investigators will examine seized evidence, trace financial proceeds, and seek to identify additional victims, attacks, and participants.
Article Details
- Event Type
- Multinational law-enforcement operation targeting the KillSec ransomware group, resulting in three arrests and seizures.
- Impact
- Authorities seized five servers, domains operated by KillSec, and at least 110 terabytes of stolen data. Eurojust says the group has been active since 2024 and carried out nearly 1,000 attacks worldwide.
Threat Actors
Countries
BelgiumEurojust coordinated judicial authorities from Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States.FinlandEurojust coordinated judicial authorities from Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States.GermanyEurojust coordinated judicial authorities from Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States.GreeceOfficers carried out eight house searches in Spain, Greece, the United Kingdom and Romania.RomaniaOfficers carried out eight house searches in Spain, Greece, the United Kingdom and Romania.SpainOfficers carried out eight house searches in Spain, Greece, the United Kingdom and Romania.SwitzerlandEurojust coordinated judicial authorities from Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States.United KingdomOfficers carried out eight house searches in Spain, Greece, the United Kingdom and Romania.United StatesEurojust coordinated judicial authorities from Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States.