KillSec ransomware takedown by Operation KillSwitch
Law Enforcement
Summary
Hide ▲
Show ▼
Authorities seized KillSec’s leak site and servers, arrested three suspects, and disrupted a ransomware case tied to about 1,000 suspected attacks worldwide. The coordinated action also exposed the group’s alleged 16-year-old administrator and cut off infrastructure used for extortion. The takedown matters because it targeted both the group’s operational systems and its criminal proceeds.
Related Happenings
1VPNS takedown in Operation Saffron
Law Enforcement
H score26
First: 14.07.2026 12:40
Last: 14.07.2026 12:40
Sources 1
About this happening:
French and Dutch authorities took down 1VPNS, seized 33 servers, and arrested its administrator in Operation Saffron, disrupting a VPN service used by ransomware...
1VPNS takedown in Operation Saffron
Law EnforcementAbout this happening: French and Dutch authorities took down 1VPNS, seized 33 servers, and arrested its administrator in Operation Saffron, disrupting a VPN service used by ransomware...
StealC and Amadey infostealer infrastructure disruption
Malware Activity
H score69
First: 24.06.2026 18:25
Last: 24.06.2026 18:25
Sources 1
About this happening:
StealC and Amadey malware infrastructure was disrupted in Operation Endgame, cutting off the command-and-control services used to manage infected systems. Europol said...
StealC and Amadey infostealer infrastructure disruption
Malware ActivityAbout this happening: StealC and Amadey malware infrastructure was disrupted in Operation Endgame, cutting off the command-and-control services used to manage infected systems. Europol said...
Operation Endgame takedown of Amadey and StealC infrastructure
Law Enforcement
H score66
First: 24.06.2026 18:02
Last: 24.06.2026 18:02
Sources 1
About this happening:
An international law-enforcement takedown under Operation Endgame disrupted shared infrastructure used by Amadey and StealC, with Microsoft, Europol, and i...
Operation Endgame takedown of Amadey and StealC infrastructure
Law EnforcementAbout this happening: An international law-enforcement takedown under Operation Endgame disrupted shared infrastructure used by Amadey and StealC, with Microsoft, Europol, and i...
Europol-led AudiA6 crypto-laundering takedown
Law Enforcement
H score29
First: 11.06.2026 18:55
Last: 11.06.2026 18:55
Sources 1
About this happening:
Law enforcement dismantled AudiA6, a cryptocurrency laundering service used by ransomware gangs and other cybercriminal networks, in a June 10, 2026 multinatio...
Europol-led AudiA6 crypto-laundering takedown
Law EnforcementAbout this happening: Law enforcement dismantled AudiA6, a cryptocurrency laundering service used by ransomware gangs and other cybercriminal networks, in a June 10, 2026 multinatio...
First VPN had assets seized in First VPN takedown
Law Enforcement
H score17
First: 21.05.2026 18:30
Last: 21.05.2026 18:30
Sources 1
About this happening:
Authorities took down First VPN, a ransomware-linked service used to hide cybercrime activity, in a coordinated action led by France and the Netherlands. The operation...
First VPN had assets seized in First VPN takedown
Law EnforcementAbout this happening: Authorities took down First VPN, a ransomware-linked service used to hide cybercrime activity, in a coordinated action led by France and the Netherlands. The operation...
Timeline
-
01.10.2026 17:25 2 articles · 1h ago
KillSec ransomware takedown by Operation KillSwitch
Initial DisclosureOn September 30, an international operation moved against KillSec by seizing its leak site and servers and making three arrests. The initial action also identified a suspected 16-year-old administrator and began securing evidence tied to the group’s extortion infrastructure.
Show sources
- Police dismantle KillSec ransomware gang allegedly led by 16-year-old — www.bleepingcomputer.com — 01.10.2026 17:25
- Police dismantle KillSec ransomware gang allegedly led by 16-year-old — www.bleepingcomputer.com — 01.10.2026 17:25