🔸 Operation KillSwitch

KillSec is a ransomware group active since 2024, running a double-extortion scheme: encrypt the servers, then threaten to leak the data anyway — even if the victim had backups. Around 1,000 suspected attacks globally, ~500 confirmed successful.

On September 30, a coordinated sweep across Europe and the U.S. brought it down. The suspected administrator: a 16-year-old Romanian national, arrested in Alicante. Two more in their twenties picked up in Britain and Romania. Dutch national Fouad Eltibrizi, living in the UK as *Archduke*, was indicted in Puerto Rico — up to 10 years if convicted.

Seized: five servers, the dark-web leak site, and 110 TB of stolen data. Investigators also found the group had used AI to build its infrastructure and scout new targets.

A teenager ran the operation. AI helped him find the next victim. Europol has the details.

Decrypt