started · updated
Europol dismantles KillSec ransomware group in international operation
An international law enforcement operation, known as ‘Operation KillSwitch’, has dismantled key elements of the KillSec ransomware group. Coordinated by Europol and Eurojust with support from the FBI, the operation resulted in three arrests and eight simultaneous searches across Spain, Greece, the United Kingdom, and Romania.
In Spain, authorities arrested a 16-year-old in Alicante suspected of being a primary administrator for the group. Investigators also identified a woman under investigation for her alleged links to the criminal network. The group is suspected of carrying out approximately 1,000 cyberattacks since 2024, with 500 of those being successful.
Evidence suggests the group utilized artificial intelligence to develop ransomware, identify potential victims, and automate parts of their attacks. One specific attack targeting an entity in Catalonia resulted in estimated damages of approximately one million euros. During the raids, police seized computers, mobile phones, and cryptocurrency wallets used to manage ransom payments.
Entities
Alicante · Cato Networks · Europol · FBI · Hamburg Police · KillSec · Mossos d’Esquadra
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 2 SOURCES] A cyberattack attributed to KillSec against a Catalan entity caused approximately one million euros in damages. www.elcatalan.es · www.elliberal.cat
- [○ 1 SOURCE] Europol has identified approximately 1,000 attacks, with 500 successful cases. www.dr.dk
- [● 2 SOURCES] A 16-year-old suspect was arrested in Alicante, Spain, for his alleged role as a main administrator of KillSec. www.elcatalan.es · www.elliberal.cat
- [○ 1 SOURCE] The KillSec hacker group used AI to build ransomware and identify potential victims. www.dr.dk
- [● 2 SOURCES] Operation KillSwitch involved searches in Spain, Greece, the United Kingdom, and Romania. www.elcatalan.es · www.elliberal.cat
- [● 3 SOURCES] Three individuals have been arrested in connection with the KillSec investigation. www.dr.dk · www.elcatalan.es · www.elliberal.cat