🚨Operation KillSwitch, led by German authorities, with support from Europol and Eurojust, has taken action against KillSec, a ransomware-as-a-service group linked to around 1,000 suspected attacks worldwide.

Key Highlights:
🔹 274 organizations were publicly claimed as victims on KillSec’s leak site.
🔹 Around 35% of identified victims were in North America, 30% in Asia-Pacific, and 14% in Europe
🔹 Financial services, healthcare, and government were among the most affected sectors
🔹 The group operated a fully functional affiliate platform with ransom negotiation and payment handling capabilities, payload configuration for Windows and VMware ESXi environments, a Tor-based DLS, and more

Group-IB supported the international Operation KillSwitch with investigative intelligence on KillSec’s operations, infrastructure, and key enablers.

Read the full press release to learn more.

#CyberSecurity #Ransomware #OperationKillSwitch