Teen suspected of running KillSec ransomware group as cops seize servers, arrest three
Operation KillSwitch takes over leak site holding at least 110 TB of stolen data
German-led Operation KillSwitch has seized the infrastructure of the KillSec ransomware group and made three provisional arrests. The 16-year-old suspected main operator of the group, linked to around 1,000 attacks worldwide, remains unnamed. Three suspects have been arrested: a Dutch national, Fouad Eltibrizi, charged by the US Department of Justice; a 24-year-old Romanian who assisted in establishing KillSec in October 2023; and a Romanian national in his twenties arrested on suspicion of acting as a KillSec affiliate.
The coordinated raids took place on September 30, following investigations that began in early 2025. Authorities have seized at least 110 TB of data from KillSec's leak site and are examining seized devices to identify victims, attacks, and suspects.
Brief written by urgent.news from The Register Science's own syndicated text. Machine-written — may contain errors; check the original before relying on it.
