ThreatPaper

#ransomware-as-a-service

2 cases

Qilin ransomware operator extradited from Japan to Germany: what the record shows, and what it does not

A 28-year-old Russian, described as a Qilin core member, was arrested in Osaka in May 2026 and handed to Germany on 2 October over a September 2024 attack on a German logistics firm and a ~¥26M Bitcoin ransom. The case rests on investigative sources, not a published charging document.

Ransomware
Operation KillSwitch: KillSec ransomware takedown, a 16-year-old suspect and a US indictment

Operation KillSwitch seized KillSec's leak site and five servers on 30 September 2026, securing 110 TB of stolen data. A 16-year-old is the alleged main operator; a Dutch national is indicted in Puerto Rico. What the primary sources say, and where the numbers diverge.

RansomwareExtortion & Blackmail