Operation KillSwitch: Teenager suspected of leading KillSec ransomware group


On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access. The cybercrime group used the site to threaten organisations with the publication of stolen files unless they paid a ransom.

The action was part of Operation KillSwitch, an international investigation led by German authorities into around 1 000 suspected attacks worldwide. Investigators identified a 16-year-old as the group’s suspected main operator. Three suspects were provisionally arrested and eight properties searched in Greece, Romania, Spain, and the United Kingdom. Authorities also targeted the group’s criminal proceeds.

KillSec stole sensitive data by exploiting vulnerabilities and poorly secured access points to organisations’ systems. Around 500 of the suspected attacks have so far been identified as successful. This figure may change as investigators examine the evidence seized during the operation.

Read more…
Source:  EUROPOL News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Pakistan: FIA files cyberterrorism case against suspect for allegedly sharing fake news that incited UK riots

    August 21, 2024

    The Federal Investigation Agency (FIA) has arrested and booked a Lahore resident for allegedly sharing fake information that incited the recent riots across the UK, it emerged on Wednesday. More than a week after the kingdom witnessed widespread riots in the aftermath of the fatal stabbing of three young girls in Southport, law enforcement agencies began ...

  • UK to conduct review on tackling ‘extremist ideologies’, including misogyny

    August 18, 2024

    UK Home Secretary Yvette Cooper has ordered a review of the United Kingdom’s counterterrorism strategy on how to best tackle threats by “extremist ideologies” including misogyny. Other ideological trends to be investigated by the Home Office include “Islamism” and far-right “extremism”. Cooper said the strategy will “map and monitor extremist trends” and gauge how to direct ...

  • UK: Man charged with encouraging terrorism appears in court

    August 16, 2024

    A man described in court as a “political activist” has appeared at the Old Bailey charged with encouraging terrorism over social media posts relating to the Charlie Hebdo attack. Majid Novsarka, otherwise known as Majid Freeman, attended the London court on Friday charged with encouragement of terrorism and supporting the proscribed organisation Hamas. It is alleged ...

  • ‘Keyboard warrior’ jailed for part in UK disorder

    August 16, 2024

    A man who posted material on social media to stir up racial hatred during recent unrest across the UK has been jailed for three years. Wayne O’Rourke, who had more than 90,000 followers to his X account, posted misinformation about the killing of three young girls in Southport on 29 July and praised the burning of ...

  • Turkish intelligence dismantles global cyber espionage network

    August 13, 2024

    The Turkish National Intelligence Organization (MIT) has successfully dismantled a global cyber espionage network that had stolen personal data from thousands of individuals worldwide, including in Türkiye. In a coordinated effort with the Turkish Gendarmerie General Command and the National Cyber Incident Response Center (USOM), MIT carried out the operation as part of an investigation led ...

  • FBI investigating attempts to hack Biden-Harris and Trump campaigns

    August 12, 2024

    Federal investigators are looking into whether Iranian hackers targeted individuals associated with the Trump and Biden-Harris campaigns, three people familiar with the investigation confirmed to CBS News. The FBI launched the probes in the early summer, after both presidential campaigns experienced attempted phishing schemes targeting people on the campaign, the sources said. Iran-backed cybercriminals are the ...