Spanish police arrested a 16-year-old on September 30 whom they suspect of operating the KillSec ransomware group. The arrest was part of a coordinated operation that resulted in three total arrests and the seizure of KillSec's leak site and servers.
KillSec is accused of conducting extortion campaigns targeting organizations. The group's typical method involved stealing data and threatening to publish it publicly unless victims paid ransom demands. Law enforcement took control of the group's leak site during the operation, disrupting the infrastructure used to conduct these threats.
The teenager was identified as a suspected leader or operator of the ransomware group's activities. The operation represents a significant disruption to KillSec's infrastructure and operations, though specific details about the roles of the other two arrested individuals were not disclosed in available reports.
This arrest highlights law enforcement efforts to dismantle ransomware operations targeting businesses and organizations. Spanish authorities conducted the investigation and enforcement action that led to the arrests and seizure of digital assets associated with the group.