Police Target KillSec Ransomware Group with Arrests and Seizures

Europol-led operations disrupted KillSec, a ransomware-as-a-service active since 2024 that is linked to at least 500 successful attacks (potentially twice that), seized the group's leak site and five servers preventing about 110 TB of stolen data from being published, and led to searches and arrests across multiple countries including a suspected 16-year-old administrator; the report details the group's exploitation of software vulnerabilities and misconfigured cloud storage, its role as both ransomware operator and data broker, victim geography, and a related indictment of a named suspect.