Investigation victorious: Collaborative effort between Verden's Public Prosecutor's Office and Lower Saxony State Criminal Police Office (LKA)
Lower Saxony Police Successfully Seize Ransomware Group's Infrastructure
In a significant blow to cybercrime, the State Criminal Investigation Office of Lower Saxony (LKA Niedersachsen) has announced the seizure of the technical infrastructure of the notorious ransomware group Blacksuit/Royal. The announcement was made via news aktuell on July 24, 2025.
The head of cybercrime investigations at the LKA Lower Saxony, who worked in cooperation with international partners and the public prosecutor's office in Verden, has identified and seized the group's infrastructure. However, the name of this individual remains undisclosed.
First Chief Inspector Frank Puschin, head of cybercrime investigations at the LKA Lower Saxony, will be available for media at an event scheduled for July 29, 2025, at 12:30 PM. The event will take place at Waterlooplatz 11, 30169 Hannover. Media are encouraged to arrive in good time and register at the reception. A visitor pass and personal data will be required for access to the building.
The disruption of the servers has disrupted the communication, distribution of malware, and the leak site of the criminal group. This success sends a clear message that attacks on companies, public institutions, and private individuals will be pursued with all available means.
The damage caused by Blacksuit/Royal was over 500 million US dollars in August 2024, with further extortions having occurred since then. A total of 184 victims worldwide, including some in Germany, have been registered. The seized technical infrastructure has secured a significant amount of data, which is now being evaluated to clarify and identify further perpetrators.
LKA President Thorsten Massinger stated that this investigative success is a significant blow in the fight against cybercrime. For more information, journalists are invited to visit the LKA's website at www.LKA.Niedersachsen.de. Rebecca Kolm from the LKA's Press and Public Relations department can be reached at 0511 / 9873-1030 or via email at [email protected]. Media are also encouraged to register in advance for better planning.
Blacksuit/Royal is known for using a method called double extortion, where they not only encrypt data but also steal it before encrypting it. This tactic puts immense pressure on individuals and organizations, as the criminals threaten to publish or sell the stolen data if the ransom is not paid. The disruption of this group's operations marks a significant step forward in the fight against such cybercrime.
Read also:
- Hackers Utilize GOLD SALEM to Infiltrate Networks and Evade Security Measures, Deploying Warlock Ransomware
- Strengthening Resistance Against Combined Risks in an Age Characterized by Authoritarian Technology
- Artificial Intelligence with independent agency could potentially intervene in cybercrises.
- Autocrrypt and Cohda Wireless Collaborate for Secure Vehicle-to-Everything Communication
){kind=link}