Greek Teen Suspected of Developing Ransomware for Group Linked to Nearly 1,000 Attacks

Summary

Greek police searched an 18-year-old’s Athens home in an international operation targeting KillSec. Authorities took control of the group’s leak site and five servers, securing at least 110 terabytes of stolen data.

Key points

• The 18-year-old is suspected of developing ransomware for KillSec; Greek police said he was a minor when some alleged offenses occurred.
• KillSec is linked to nearly 1,000 attacks worldwide, while investigators identified approximately 500 successful attacks.
• Authorities said KillSec exploited inadequately protected access points, particularly those associated with cloud storage, to access organizations’ systems.
• The group allegedly copied sensitive files, demanded ransom, and published victims’ files when they refused to pay.
• Police searched the suspect’s home on September 30 and seized computers, phones, storage devices, and handwritten notes; the announcement did not say he had been arrested.
• An international operation brought KillSec’s leak site and five central servers under police control and secured at least 110 terabytes of stolen data.
• Authorities reported three arrests and eight searches across Greece, Romania, Spain, and the United Kingdom; the investigation remains ongoing.

Threat Actors

Countries

Related Articles

• Police Dismantle KillSec Ransomware Group in International OperationKillSec