Europol announces an international operation against KillSec, seizing its leak website
The official announcement describes searches and arrests across multiple countries. Organisations should still retain incident records and follow up on their own risks.
Europol announced Operation KillSwitch on 1 October. According to the announcement, law enforcement took control of KillSec's leak site on 30 September and conducted searches and arrests in four European countries.
The suspects and alleged attacks described in the announcement remain matters under investigation; refer to the latest law enforcement statements. Seizing a website also does not mean affected organisations' data has automatically been recovered.
If affected by a related threat, the incident lead should preserve evidence and follow up through trusted official channels. Do not treat social-media decryption or recovery claims as guarantees.
Original sources
This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.
KEEP READING
Recommended reading
IllustrationPHP patches and configuration follow-up: Unit 42 corrects its assessment of one intrusion's cause
IllustrationLiteLLM explains package compromise: exposed keys must be revoked to complete the response
Illustration