Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers

Police Arrest 16-Year-Old Suspected of Running KillSec 🚨

Police in Spain have arrested a 16-year-old suspected of running the KillSec ransomware group. This arrest was part of a larger operation on September 30, where police took control of the ransomware leak site. Investigators identified him as KillSec’s main operator, according to Hamburg police on October 1.

The operation also led to the arrest of two other individuals in their 20s, one in the U.K. and another in Romania. This collaborative effort involved U.S. prosecutors and the FBI’s San Juan office.

Key Details:

• Searches Conducted: 8 searches in Spain, Greece, the U.K., and Romania.
• Data Secured: At least 110 terabytes of data were secured against unauthorized access.
• Servers Shut Down: 5 servers, including KillSec’s main server, were shut down.
• Seized Items: Computer equipment, phones, and cryptocurrency wallets were confiscated.

During the investigation, it was found that KillSec exploited software vulnerabilities and poorly secured access points, particularly in cloud storage. They threatened victims with data publication unless ransoms were paid, and in cases where victims did not comply, stolen files were offered for free download.

The group reportedly used AI to enhance their operations and identify potential victims. Investigators are currently looking into about 1,000 suspected attacks worldwide, with over 280 victims identified.

Background:

KillSec began as a hacktivist group in 2021 and transitioned to ransomware in October 2023. Their ransomware variants, KillSecurity 2.0 and 3.0, are designed to encrypt files, and they have also engaged in extortion using stolen data.

Europol has stated that the authorities involved have successfully shut down this ransomware group and will continue their investigations.

For more details, check out the full article: Read full article