U.S.-Led Operation Dismantles BlackSuit Ransomware Group, Seizes $1M in Crypto

U.S. and international law enforcement agencies have disrupted the operations of Russian ransomware group BlackSuit, seizing approximately $1 million in cryptocurrency. The coordinated operation, led by the Department of Homeland Security, involved agencies from the UK, Germany, France, and other nations.

BlackSuit has targeted critical U.S. sectors since 2022, including healthcare and government entities, extorting over $370 million from more than 450 victims. The group employed double extortion tactics, encrypting systems while threatening to leak stolen data.

"Disrupting ransomware infrastructure requires dismantling the entire ecosystem that enables cybercriminals," said Michael Prado of HSI's Cyber Crimes Center. The operation included seizure warrants for VIRTUAL currency holdings across multiple blockchain networks.