International crackdown nets Romanian suspect in massive KillSec data-theft ring
A coordinated nine-country operation dubbed KillSwitch has detained a 24-year-old Romanian alleged to belong to the KillSec cyber-crime group, which is linked to roughly 1,000 data-theft attacks worldwide.
The KillSwitch investigation, coordinated under Eurojust, brought together law-enforcement agencies from nine nations to dismantle the KillSec criminal organization, which is believed to have carried out about 1,000 cyber-attacks globally. Romanian investigators from the Organized Crime Combat Directorate and DIICOT executed four search warrants in Bucharest and Vaslui, detaining a 24-year-old suspect and confiscating servers and storage media.
Prosecutors allege the group built a cloud-based command-and-control infrastructure, purchased stolen credentials on the Darknet, and used encrypted channels to breach victim systems and steal data. Victims were reportedly pressured to pay ransom in cryptocurrency under threat of data publication. The operation also involved support from Europol’s European Cybercrime Centre and two private cybersecurity firms, and led to the seizure of at least 110 terabytes of data to prevent further misuse.
Why it matters
The case highlights the scale of organized cyber-theft and the need for coordinated international law-enforcement responses.
In this story
