Dark Web Informer :verified_paw: on Nostr: 🚨 Teenagers suspected of leading ransomware group arrested in international ...
🚨 Teenagers suspected of leading ransomware group arrested in international operation
Authorities from nine countries have disrupted KillSec, a ransomware group linked to almost 1,000 attacks worldwide.
â €
A 16-year-old is suspected of serving as the group’s administrator and main operator.
Another suspected developer recently turned 18 and was a minor during several of the alleged offenses.
â €
The operation resulted in:
• Three arrests
• Eight searches in Spain, Greece, the UK and Romania
• Five servers seized
• KillSec-operated domains seized
• At least 110 TB of stolen data secured
â €
KillSec allegedly exploited poorly secured access points, particularly cloud storage, to steal sensitive data.
Victims were threatened with publication unless they paid a ransom.
The investigation remains ongoing.
Source:
https://www.eurojust.europa.eu/news/teenagers-suspected-leading-ransomware-group-arrested-during-international-operation 
Published at
2026-10-01 14:57:19 UTCEvent JSON
{
"id": "1aed2511b0ddb37d4de34de93c1322e01f5fcf168ebcad4a14f921ab6b07a9cf",
"pubkey": "3602e3a41b34946d81c007fcf5ae0daae25997b4e04b107e82e56a090c0d9b81",
"created_at": 1790866639,
"kind": 1,
"tags": [
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/366/234/697/549/382/original/88374aa3a849a4d7.jpg",
"m image/jpeg",
"dim 1920x1080",
"blurhash U47cv?Or0|s,m7jFO?R+-poJI:oyx]ogShRj"
],
[
"proxy",
"https://infosec.exchange/users/DarkWebInformer/statuses/117366236058682782",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "🚨 Teenagers suspected of leading ransomware group arrested in international operation\n\nAuthorities from nine countries have disrupted KillSec, a ransomware group linked to almost 1,000 attacks worldwide.\n⠀\nA 16-year-old is suspected of serving as the group’s administrator and main operator.\n\nAnother suspected developer recently turned 18 and was a minor during several of the alleged offenses.\n⠀\nThe operation resulted in:\n\n• Three arrests\n• Eight searches in Spain, Greece, the UK and Romania\n• Five servers seized\n• KillSec-operated domains seized\n• At least 110 TB of stolen data secured\n⠀\nKillSec allegedly exploited poorly secured access points, particularly cloud storage, to steal sensitive data.\n\nVictims were threatened with publication unless they paid a ransom.\n\nThe investigation remains ongoing.\n\nSource: https://www.eurojust.europa.eu/news/teenagers-suspected-leading-ransomware-group-arrested-during-international-operation\n\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/117/366/234/697/549/382/original/88374aa3a849a4d7.jpg",
"sig": "83bc9299ae04d452ee46be9c097996ac8cd0edaef120120b6959301ca6641c8d79c37585556681a43ea14e4b4f7f9c5f95fba9eef4cd36506c70f9684bf70c18"
}
