CERT24International operation dismantles KillSec ransomware infrastructure — 01.10.2026Loading data…
CERT24Threat Observatory
Period

International operation dismantles KillSec ransomware infrastructure — 01.10.2026

An international law-enforcement operation, “Operation KillSwitch,” seized the KillSec ransomware gang’s data leak site and servers, led to three arrests, and identified a 16-year-old as the group’s alleged main operator. The operation took place on September 30 and involved authorities from Belgium, the United States, Finland, Germany, Greece, the Netherlands, Romania, Spain, Switzerland, and the United Kingdom.

← Back to intelligence

International operation dismantles KillSec ransomware infrastructure — 01.10.2026

An international law-enforcement operation, “Operation KillSwitch,” seized the KillSec ransomware gang’s data leak site and servers, led to three arrests, and identified a 16-year-old as the group’s alleged main operator. The operation took place on September 30 and involved authorities from Belgium, the United States, Finland, Germany, Greece, the Netherlands, Romania, Spain, Switzerland, and the United Kingdom.