International Operation Disrupts KillSec Ransomware Group
- On Sept. 30, authorities provisionally detained three suspects across Greece, Romania, Spain, and the United Kingdom.
- Investigators identified a 16-year-old as the likely main operator of the KillSec group.
- Law enforcement seized five central servers and took control of a leak site containing at least 110 TB of stolen information.
- KillSec has been linked to approximately 500 confirmed attacks out of roughly 1,000 suspected incidents.
- The investigation involved law enforcement from multiple countries, including Belgium, Germany, and the United States.
The operation aimed to disrupt KillSec’s activities that exploited software vulnerabilities to access sensitive data from organizations worldwide. Authorities are also tracing potential criminal proceeds linked to cryptocurrency transactions.
This crackdown on KillSec highlights the ongoing challenges posed by ransomware groups, with investigators confirming about 500 successful attacks involving significant data theft and extortion efforts.
