logo

BlackSuit Ransomware Takes an Infrastructure Hit From Law Enforcement

ID: a14df418-fc85-5ffc-b1cf-abe59f165559

STIX ID: report--a14df418-fc85-5ffc-b1cf-abe59f165559

Feed Name: Dark Reading

Threat Score
75/100

Date Published: 2025-08-11

Date Updated: 2026-04-21

Author: Becky Bracken

...
...

US and international law enforcement conducted a coordinated takedown on July 24 targeting the BlackSuit (aka Royal) ransomware gang, seizing four servers, nine domains, and just over $1 million in cryptocurrency; BlackSuit has been active since 2022 with more than 450 known U.S. victims including schools, hospitals, energy-sector organizations, and government entities, and authorities characterize the operation as a disruption-first step while cautioning that lasting impact requires holding individuals accountable.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.