In a coordinated operation spanning twelve countries, police forces supported by Interpol and Europol dismantled the infrastructure of a ransomware cartel believed responsible for attacks on more than 2,000 organizations worldwide.
Investigators seized 34 servers, froze cryptocurrency wallets containing an estimated $46 million, and arrested nine suspects in simultaneous dawn raids. The group's leak site went dark within hours, replaced by a law-enforcement seizure notice.
Authorities said the takedown followed eighteen months of covert infiltration, during which analysts mapped the group's affiliate network and payment flows. Decryption keys recovered during the raids are being distributed to victims free of charge.
Security researchers cautioned that affiliates of the cartel are likely to regroup under new branding, a pattern seen after previous takedowns, but called the operation a significant blow to the ransomware economy.
