Security News

Teen-Led Extortion Gang KillSec Dismantled in Global Police Operation

CyberScoop · 2 Oct 2026

Key Takeaway Even smaller or seemingly amateur extortion groups can cause serious damage, so businesses should keep systems patched and have an incident response plan ready regardless of who might be behind an attack.

Europol and the US Justice Department announced the arrest of three alleged members of KillSec, a data extortion group reportedly run largely by teenagers that has compromised roughly 500 organisations since 2024. The alleged leader is said to be just 16 years old. One accused member, Fouad Eltibrizi, was arrested in the UK and is awaiting extradition to the United States over claims he acted as a negotiator for the group; he faces up to 10 years in prison if convicted.

The arrests came as part of 'Operation KillSwitch', a joint effort involving 10 countries and private cybersecurity firms. Authorities seized KillSec's data-leak site and more than 110 terabytes of data, including records of the group's criminal proceeds, and took control of the domains and servers used to manage its operations and stolen data. The FBI's Cyber Division said the action had 'degraded the adversary's core capabilities' and reduced the likelihood of future attacks.

KillSec, also known as Kill Security Ransomware Group, exploited vulnerabilities to access victims' computers and cloud infrastructure, stealing sensitive data to extort payment. Investigators conducted searches across Spain, Greece, the UK and Romania and are continuing to analyse seized evidence to identify other possible members.

ransomware law enforcement data extortion cybercrime arrests

Primary source europol.europa.eu -> justice.gov -> @FBICyberDiv on X ->

Summarised by CISO AI from CyberScoop. We link back to every original so you can read it yourself.