\n<\/p>\n
German prosecutors say a joint U.S.-European operation has seized infrastructure belonging to the BlackSuit ransomware gang, a notorious hacking group blamed for several major cyberattacks in recent years.<\/p>\n
In a new statement<\/a> this week, officials in Germany said they had seized the gang\u2019s servers and systems as part of an operation on July 24. The officials said the operation had secured \u201cconsiderable amounts of data\u201d that will be used to help identify the individuals responsible for the attacks.<\/p>\n The officials said they switched off the servers, effectively cutting off the ransomware malware. The statement said BlackSuit had a total of 184 victims worldwide, of which several were in Germany.<\/p>\n At the time of publication, the BlackSuit\u2019s leak site on the dark web, which it used to publish files and extort victims into paying a ransom, was no longer loading. It now displays a seizure notice saying the site was taken down by a \u201ccoordinated international law enforcement investigation.\u201d\u00a0<\/p>\n The operation went ahead with help from ICE\u2019s Homeland Security Investigations unit and Europol, according to the German officials. Representatives for ICE did not return a request for comment.<\/p>\n U.S. authorities reportedly disclosed the seizure earlier in the week, per one report<\/a>. It\u2019s not immediately clear if any arrests were made.<\/p>\n BlackSuit has been one of the more prolific ransomware operations<\/a> in recent years, targeting U.S. cities like Dallas<\/a>, as well as organizations in the manufacturing, communications, and healthcare industries.\u00a0<\/p>\n In 2024, U.S. cybersecurity agency CISA warned that the gang was rebranding from Royal to BlackSuit<\/a>. It\u2019s not uncommon for ransomware gangs to spin off or merge with other groups to skirt government-imposed sanctions that make it more difficult to profit from cyberattacks.<\/p>\n