logo

BlackSuit ransomware extortion sites seized in Operation Checkmate

ID: 5232a913-3945-516b-a897-e510f4447039

STIX ID: report--5232a913-3945-516b-a897-e510f4447039

Feed Name: Bleeping Computer

Threat Score
75/100

Date Published: 2025-07-24

Date Updated: 2026-04-20

Author: Sergiu Gatlan

...
...

Law enforcement executed a coordinated international seizure of BlackSuit ransomware dark web domains and negotiation sites (Operation Checkmate), disrupting data leak blogs and extortion infrastructure; the report also traces BlackSuit’s evolution from Quantum/Royal, its ties to Conti, the large scale of its extortion activity (hundreds of victims and over $500M in demands), and Cisco Talos’ assessment that the group may rebrand as Chaos.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.