International operation arrests three suspects linked to KillSec ransomware group
Summary
Authorities from nine countries arrested three suspects linked to KillSec, a ransomware group blamed for nearly 1,000 attacks, and seized servers, domains and evidence, including at least 110 terabytes of stolen data.
Key points
- Authorities say KillSec carried out nearly 1,000 attacks worldwide since 2024, stealing data and threatening to publish it unless victims paid.
- The group allegedly gained access through poorly secured access points, particularly those linked to cloud storage.
- A 16-year-old is suspected of being the group’s main operator and administrator; other suspects allegedly held roles including developer, negotiator and affiliate.
- The operation involved authorities from nine countries and was coordinated by Eurojust and Europol.
- Three suspects were arrested, and eight house searches were conducted in Spain, Greece, the United Kingdom and Romania.
- Authorities seized five servers, domains, evidence and assets, and secured at least 110 terabytes of stolen data.
- Investigators will examine seized devices and data and trace financial proceeds to identify further victims, attacks and people involved.
Article Details
- Event Type
- International law-enforcement operation against the KillSec ransomware group, resulting in arrests and the seizure of infrastructure, evidence, and assets.
- Impact
- Three suspects were arrested, five servers used by the group were seized, and authorities secured at least 110 terabytes of stolen data. Authorities also seized domains operated by KillSec. The group was linked to almost 1,000 attacks worldwide; the investigation is ongoing.
Threat Actors
Countries
BelgiumEurojust coordinated judicial authorities from Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States. A joint investigation team was set up at Eurojust betweenFinlandEurojust coordinated judicial authorities from Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States. A joint investigation team was set up at Eurojust betweenGermanyEurojust coordinated judicial authorities from Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States. A joint investigation team was set up at Eurojust betweenGreeceEurojust coordinated judicial authorities from Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States. A joint investigation team was set up at Eurojust betweenRomaniaEurojust coordinated judicial authorities from Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States. A joint investigation team was set up at Eurojust betweenSpainEurojust coordinated judicial authorities from Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States. A joint investigation team was set up at Eurojust betweenSwitzerlandEurojust coordinated judicial authorities from Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States. A joint investigation team was set up at Eurojust betweenUnited Kingdomjudicial authorities from Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States. A joint investigation team was set up at Eurojust between authorities fromUnited Statesfrom Belgium, Finland, Germany, Greece, Romania, Spain, Switzerland, the United Kingdom and the United States. A joint investigation team was set up at Eurojust between authorities from Belgium, Germany, Greece