Group-IB, a creator of predictive cybersecurity technologies to investigate, prevent, and fight digital crime, announces its contribution to Operation KillSwitch, an international investigation led by the Hamburg State Criminal Police Office (Landeskriminalamt Hamburg) and the Hamburg Public Prosecutor's Office, with the support of Europol and Eurojust, into KillSec, a ransomware-as-a-service (RaaS) group linked to around 1,000 suspected attacks worldwide.
On 30 September 2026, law enforcement took control of KillSec's leak site, securing at least 110 terabytes of stolen data, while three suspects were provisionally arrested and eight properties searched in Greece, Romania, Spain, and the United Kingdom. Investigators identified a 16-year-old as the group's suspected main operator. Group-IB supported the investigation with intelligence on the group's operations, infrastructure, and key enablers.
