German prosecutors say a joint U.S.-European operation has seized infrastructure belonging to the BlackSuit ransomware gang, a infamous hacking group blamed for a number of main cyberattacks in recent times.
In a brand new assertion this week, officers in Germany mentioned that they had seized the gang’s servers and methods as a part of an operation on July 24. The officers mentioned the operation had secured “appreciable quantities of knowledge” that can be used to assist establish the people chargeable for the assaults.
The officers mentioned they switched off the servers, successfully slicing off the ransomware malware. The assertion mentioned BlackSuit had a complete of 184 victims worldwide, of which a number of had been in Germany.
On the time of publication, the BlackSuit’s leak website on the darkish internet, which it used to publish recordsdata and extort victims into paying a ransom, was not loading. It now shows a seizure discover saying the location was taken down by a “coordinated worldwide legislation enforcement investigation.”
The operation went forward with assist from ICE’s Homeland Safety Investigations unit and Europol, in keeping with the German officers. Representatives for ICE didn’t return a request for remark.
U.S. authorities reportedly disclosed the seizure earlier within the week, per one report. It’s not instantly clear if any arrests had been made.
BlackSuit has been one of many extra prolific ransomware operations in recent times, concentrating on U.S. cities like Dallas, in addition to organizations within the manufacturing, communications, and healthcare industries.
In 2024, U.S. cybersecurity company CISA warned that the gang was rebranding from Royal to BlackSuit. It’s not unusual for ransomware gangs to spin off or merge with different teams to skirt government-imposed sanctions that make it tougher to revenue from cyberattacks.
Safety researchers have since discovered {that a} new ransomware gang dubbed Chaos is probably going made up of former members of the BlackSuit gang.
A screenshot of the BlackSuit ransomware website, now seizedImage Credit:TechCrunch (screenshot)
Supply hyperlink
