Operation KillSwitch

Campaign
9 incidents First seen 2026-09-22 Last seen 2026-10-26
Overview

Operation KillSwitch appears in 5 incidents tracked by Vulpsec CTI; the most recent is: Operation KillSwitch: Police Dismantle KillSec Ransomware Group. Targeted sectors: government.

Investigate in CTI Graph Login required Open in Dashboard
Threat ecosystem
Actors Malware Campaigns CVEs
Tap a node for a quick look · double-tap to open its profile
At a glance
peak priority 255
Activity by month (incidents)
2026-092026-10
Sectors targeted
government · 4health · 3finance · 2aerospace · 1aviation · 1education · 1hospitality · 1manufacturing · 1media · 1retail · 1
Countries targeted
DE · 7GB · 7NL · 7US · 7AT · 6BE · 6CA · 6CH · 6ES · 6GR · 6DK · 5FI · 5
Origin
GB · 6CA · 5ES · 5GR · 5US · 5RO · 4
Kinds of incident
Ransomware & Extortion · 8Law Enforcement · 6AI-Enabled Attack · 2Cyberattack (general) · 1Data Breach · 1
Techniques seen in incidents
Ransomware · 9Data Leak · 5Extortion · 3Phishing · 3Defacement · 2Credential Stuffing · 1Data Breach · 1Ddos · 1Exfiltration · 1Impersonation · 1Lateral Movement · 1Privilege Escalation · 1Sabotage · 1Social Engineering · 1
Related malware
ALPHV · 1BlackCat · 1Ryuk · 1SysUpdate · 1
Related actors
LAPSUS$ · 1Scattered Spider · 1ShinyHunters · 1
Related CVEs
CVE-2026-35273 · 1
Incident timeline
2026-10-26
BleepingComputer CyberScoop Data Breaches TheRecord Mastodon BrianKrebs SecurityWeek AlienVault OTX SecurityWeek The Register - CSO The Hacker News CyberScoop Mastodon BrianKrebs Chosun National CyberScoop TheRecord Krebs On Security The Register - CSO AlienVault OTX Krebs On Security HackRead AlienVault OTX BleepingComputer
2026-10-21
Renowned ransomware organization 'KillSec' is operated by a group of 10th-grade teenagers, utilizing AI in their attacks.
Datanet
2026-10-01
Alleged KillSec Ransomware Mastermind a 16-Year-Old
Dark Reading
2026-10-01
KillSec Ransomware Group Dismantled, 16-Year-Old Suspected Admin Arrested
HackRead
2026-10-01
Operation KillSwitch: Police Dismantle KillSec Ransomware Group
Security Affairs
2026-10-01
Police dismantle KillSec ransomware gang allegedly led by 16-year-old
AlienVault OTX
2026-10-01
An international law enforcement operation dubbed "Operation...
Mastodon BleepingComputer
2026-10-01
Police dismantle KillSec ransomware gang allegedly led by 16-year-old
BleepingComputer
2026-09-22
Infosecurity-Magazine AlienVault OTX AlienVault OTX AlienVault OTX Kaspersky