Law enforcement agencies have seized control of a ransomware operation allegedly masterminded by a 16-year-old, dismantling the group’s infrastructure and locking down 110 terabytes of stolen data.
The takedown, coordinated by Europol, targeted the dark-web operations of KillSec. Officers secured five central servers along with the gang’s leak site, preventing further unauthorized access to the pilfered information.
Dubbed Operation KillSwitch, the global probe now examines roughly 1,000 suspected cyberattacks tied to the group. Investigators have confirmed about 500 successful breaches so far, though Europol cautioned that number may shift as forensic teams analyze the confiscated evidence.
Spanish authorities arrested the suspected administrator, a Romanian national, in Alicante. Police identified the teenager as KillSec’s primary operator and lead figure.
A second individual, believed to have served as a developer for the group, turned 18 in August. They remained a minor at the time of several alleged offenses.
Investigators have also pinpointed a suspected negotiator and an affiliate member. Meanwhile, inquiries into additional participants continue across Europe.
The operation underscores a troubling trend: increasingly young individuals allegedly orchestrating sophisticated cybercrime networks. With server data now in police hands and the leak site offline, authorities expect further arrests as the investigation expands.
