Cyber Security News

FBI Seized ALPHV/Blackcat Ransomware Dark Web Site

Law enforcement agencies, including the FBI, the U.S. Department of Justice, and several European security organizations working under Europol, have successfully taken down the website belonging to the notorious cybercriminal ALPHV, also known as Blackcat.

ALPHV/Blackcat Ransomware, a notorious ransomware service, has managed to infect more than 1,000 victims across the globe.

In the world of cybercrime, there is a disturbingly popular model known as ransomware-as-a-service. This model involves a group of developers who specialize in creating and updating ransomware and who also maintain the necessary internet infrastructure to carry out their illicit activities. One such group that operates in this manner is Blackcat.

The notorious ALPHV/BlackCat ransomware group has taken ownership of the cyberattack that caused significant disruption to the operations of MGM Resorts – a highly regarded hotel and casino chain. This targeted attack has caused severe damage to the company’s systems and has raised concerns over the security of customer data.

FBI Decryption Tool

A decryption tool was created by the FBI, which enabled FBI field offices across the country and global law enforcement partners to provide more than 500 impacted victims with the ability to recover their systems.

As part of the investigation, the FBI has obtained access to the computer network belonging to the Blackcat ransomware group. The agency has also seized the group’s several websites.

“Today’s announcement highlights the Justice Department’s ability to take on even the most sophisticated and prolific cybercriminals,” said U.S. Attorney Markenzy Lapointe for the Southern District of Florida.

“The FBI continues to be unrelenting in bringing cybercriminals to justice and determined in its efforts to defeat and disrupt ransomware campaigns targeting critical infrastructure, the private sector, and beyond,” said FBI Deputy Director Paul Abbate.

The warrant states that a ransomware variant has impacted critical infrastructure in the United States. This includes government facilities, emergency services, defense industrial base companies, critical manufacturing, healthcare, and public health facilities, as well as other corporations, government entities, and schools.

If you possess any details regarding Blackcat, its associates, or its operations, you could qualify for compensation through the Rewards for Justice initiative under the jurisdiction of the Department of State.

Guru Baran

Gurubaran KS is a cybersecurity analyst, and Journalist with a strong focus on emerging threats and digital defense strategies. He is the Co-Founder and Editor-in-Chief of Cyber Security News, where he leads editorial coverage on global cybersecurity developments.

Recent Posts

Kimsuky Operation GitPower Uses GitHub to Deliver Malware and Steal Data

Kimsuky is using GitHub and other trusted code platforms to deliver malware, run commands, and…

27 minutes ago

Critical SonicWall Vulnerability Exploited in Attacks Following Disclosure

A critical SonicWall SMA1000 flaw, CVE-2026-102255 (CVSS 10.0), is being actively exploited days after disclosure,…

2 hours ago

Massive DDoS Attack Disrupts Ubuntu’s Canonical Websites and Security APIs

Canonical, the company behind Ubuntu Linux, suffered a sustained distributed denial-of-service attack on October 8,…

5 hours ago

Yandex Data Center Outage Disrupts Access to Cloud Files Following Drone Attack

Yandex has confirmed a major service outage after drone attacks damaged three data centers in…

5 hours ago

WordPress Plugin Vulnerability Exploited in Attacks to Upload and eEecute Arbitrary PHP code

Attackers are targeting a critical security flaw in the Bricksforge WordPress plugin that lets them…

6 hours ago

LG webOS Flaws Let Remote Attackers Execute Commands as Root Without Authentication

Security researchers have disclosed four serious vulnerabilities in LG webOS smart TVs that could allow…

6 hours ago