- American police say black is completely dismantled
- Agencies have seized servers, areas and digital assets
- Since 2022, the group has struck 450 companies and stole millions of dollars
Blacksuit, a group of ransomware and a successor to the Royal gang, managed to compromise 450 organizations in the United States and steal $ 370 million in ransom payments, before being dismantled by US law enforcement agents, said the US Department of Internal Security (DHS).
A press release published on the American immigration and customs website (ICE), said the ICE internal security surveys (its main investigation), in coordination with American and international police agents, “the critical infrastructures dismantled with success by ransomware of the black combination”.
“The operation has led to convulsions of servers, domains and digital assets used to deploy ransomware, extort the victims and the benefits of washing,” he said.
No arrests
The announcement said that since 2022, the Royal and Black Ransomware groups have compromised more than 450 known victims in the United States, including health, education, public security, energy and government sector.
These attacks brought them more than $ 370 in cryptocurrency, based on today’s prices.
Unfortunately, no one has been arrested, and if history has taught us something – these threat actors will be back as soon as possible.
Although the infrastructure disruption is a commendable decision and will certainly make things difficult for the actors of the short -term threat, they will have no problem restoring the equipment, in particular with $ 370 million in their pocket.
Previously, the FBI, the internal security of the United States, the United States Ministry of Justice (DOJ) and other partners, have degraded the main blacksuit website, as well as extortion and data leakage sites, in a bite called “Checkmate operation”.
A report by the United States Ministry of Health and Social Services published at the end of November 2023 said that the dark had been spotted for the first time in the same year, showing “striking parallels with Royal, the direct successor of the Old Operation of Conti linked to Russian”.
“This operation strikes a critical blow to the infrastructure and Blacksuit operations,” said special agent of the United States Criminal Service Investigators in charge of William Mancino.
“American secret services are determined to work alongside our law implementation partners to dismantle criminal companies and prevent the deployment of malicious ransomware that victimize businesses and organizations.”
Via Bleeping Compompute
