Data Leak Site - GoKawiil

Europol-led operation shuts down KillSec ransomware gang, arrests three

An international law enforcement operation named Operation KillSwitch seized KillSec's dark web leak site and five servers, including its main infrastructure and data-storage systems. German authorities led the investigation into roughly 1,000 suspected attacks worldwide, resulting in three provisional arrests and eight property searches across Greece, Romania, Spain and the UK, with a 16-year-old identified as the group's suspected administrator.

bleepingcomputer.com · 2026-10-01

ShinyHunters breaches Clop ransomware's leak site, defaces it and claims stolen data

The extortion group ShinyHunters says it exploited an unauthenticated file upload flaw in Grav CMS to compromise the Tor-based data leak site run by the Clop ransomware operation. The attackers uploaded a taunting message, later fully defaced the site with Pokémon-themed ASCII art, and claim to have exfiltrated source code, CMS plugins, system logs and other server files. BleepingComputer confirmed the defacement was live on Clop's infrastructure and that the uploaded file could be downloaded from the site.

bleepingcomputer.com · 2026-09-19