logo

US confirms takedown of BlackSuit ransomware gang that racked up $370 million in ransoms

ID: eab40617-667c-576e-870e-e5cd5eb055dc

STIX ID: report--eab40617-667c-576e-870e-e5cd5eb055dc

Feed Name: The Record from Recorded Future News

Threat Score
85/100

Date Published: 2025-08-08

Date Updated: 2026-05-01

...
...

U.S. and international law enforcement disrupted the BlackSuit (formerly Royal) ransomware operation in a coordinated takedown that seized servers, domains, and digital assets used to deploy ransomware and launder proceeds; the gang is accused of attacking over 450 U.S. entities and collecting more than $370M in ransoms, with impacts to critical infrastructure and public services. Authorities recovered substantial data for follow-on investigations, while researchers observed some affiliates pivoting to a new ransomware strain called Chaos.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.