Edited by Sergio Silvestri

Global Effort to Fight Ransomware: A Major Cybersecurity Triumph

A Decisive Blow to Cybercrime: The Ragnar Locker Group Defeat

A few weeks ago, we witnessed a significant breakthrough in the fight against cybercrime. Law enforcement and judicial authorities from eleven countries, coordinated by Europol and Eurojust, dealt a severe blow to one of the most dangerous ransomware groups in recent years: Ragnar Locker.

The operation, which took place at the end of October, involved searches in the Czech Republic, Spain, and Latvia, culminating in the arrest in Paris of the main suspect, believed to be a developer from the Ragnar group. This action dismantled the ransomware infrastructure in several countries, including the Netherlands, Germany, and Sweden, and led to the closure of their Tor data leak site.

The Ragnar Locker ransomware infrastructure has been seized in the Netherlands, Germany, and Sweden, and its Tor data leak site has been shut down in Sweden. This significant success follows a complex investigation conducted by the French National Gendarmerie, with support from law enforcement agencies in several countries, including the Czech Republic, Germany, Italy, Japan, Latvia, the Netherlands, Spain, Sweden, Ukraine, and the United States.

Ragnar Locker, active since December 2019, made a name for itself by attacking critical infrastructure worldwide, including a Portuguese national airline and a hospital in Israel. The group was known for using a double extortion tactic, demanding exorbitant payments for both decryption tools and the withholding of stolen sensitive data.

The Ragnar Locker threat level was considered high, given the group's propensity for attacking critical infrastructure. Despite the group's threats to publish stolen data if victims contacted law enforcement, international cooperation proved crucial.

The synergy between Europol and the various countries involved established a joint strategy, with Europol providing analytical, forensic, and cryptocurrency traceability support. Eurojust played a crucial role in facilitating judicial cooperation between the countries involved.

This operation marks a significant step in the fight against ransomware groups. As experts in the fields of anti-money laundering and financial security, we must always remain vigilant and cooperate internationally to counter these threats. Cybersecurity is a fundamental aspect of our fight against money laundering and financial fraud.

SOURCE: europol.europa.eu