Spanish National Police, operating through the Ciberpolice Unit, arrested a 16-year-old suspected of administering the KillSec ransomware group. The operation, conducted on September 30, 2026, also resulted in the seizure of KillSec's data leak site and servers. Three individuals were detained in total. KillSec was accused of exfiltrating data from organizations and threatening to publish it unless ransom payments were made.

What should defenders do?

Organizations should remain vigilant for residual KillSec activity or copycat ransomware groups. Review backup integrity, ensure patching is up to date, and educate users on phishing and initial access vectors. Monitor for indicators of compromise associated with KillSec if available from threat intelligence sources.

highRansomware

Spanish Police Arrest 16-Year-Old Suspected of Running KillSec Ransomware Group

Three arrests and seizure of leak site and servers disrupt ransomware operations

CyberIntel DeskPublished about 2 hours agoUpdated less than a minute ago1 min read

Spanish Police Arrest 16-Year-Old Suspected of Running KillSec Ransomware Group

Key Takeaways

Spanish National Police arrested a 16-year-old suspected of administering the KillSec ransomware group on September 30, 2026.
Two additional individuals were arrested, and KillSec's data leak site and servers were seized.
KillSec is accused of exfiltrating organizational data and threatening public disclosure unless ransom demands were met.

Related Security News

highRansomware

International Law Enforcement Disrupts KillSec Ransomware Operation, Alleged Mastermind Identified as Teenager

Law enforcement agencies from multiple countries have collaborated to disrupt the KillSec ransomware operation. According to reports, the alleged mastermind is a 16-year-old individual. The operation is accused of targeting roughly 500 victims worldwide over the past two years. The disruption marks a significant action against a ransomware group that has been active in extorting organizations globally.

Dark readingabout 2 hours ago1 min read

Spanish Police Arrest 16-Year-Old Suspected of Running KillSec Ransomware Group

Key Takeaways

Related Security News

International Law Enforcement Disrupts KillSec Ransomware Operation, Alleged Mastermind Identified as Teenager

Quick answers

Security Details

Sources

Critical Vulnerabilities Discovered in Armatura LLC Armatura One Platform

South African Aviation Authorities Investigate Ransomware Incident on Air Traffic Control Network

Former US Air Force Members Sentenced to Prison for Business Email Compromise Scams

Bitget Reports $388M Loss Following Exploitation of Third-Party Security Product Flaw

JadePuffer Agentic AI Attacks Target Azure Tenants, Destroy Cloud Resources