Authorities suspect a 16-year-old was the primary operator of KillSec, a ransomware group linked to nearly 1,000 cyberattacks worldwide. The teenager's alleged role emerged during Operation KillSwitch, a coordinated international investigation led by Germany that dismantled the group's infrastructure.
The operation resulted in the seizure of the group's servers and the recovery of at least 110 TB of data. Three provisional arrests were made across Spain, the United Kingdom, and Romania. It remains unclear whether the suspected teenage operator is among those detained.