KillSec Ransomware Group Dismantled, 16-Year-Old Suspected Admin Arrested

2026-10-01T20:51:36Z•260ee8dd3be5aa81c6d5832f5235fdfb7ee60351a5a39a4f4260cc6c2e1f5cbe
Amazon-Prime-phishingC2CloudSyncDDiscord-data-theftGatekeeper-bypassISO-deliveryKillSecMALFEXMDMOverlord-RATPII-exposureWinMerge-abusebrowser-data-theftcredential-theftdata-breachfake-software-installerlaw-enforcement-operationmacOS-malwaremalicious-npm-packagespayment-card-theftphishingransomwarered-teaming

What happened

HackRead RSS items report a disrupted KillSec ransomware operation; a CloudSyncD macOS backdoor distributed through fake Zoom installers; a 6.6-million-account Times Car data breach; the MALFEX malicious npm campaign deploying Overlord RAT and stealing Discord/browser data; Global Group ransomware using phishing, ISO files, and WinMerge; and Amazon Prime phishing targeting credentials and payment-card data. The collection also includes MDM threat-modeling, online safety, software remediation, and red-team service content. No CVE identifiers are provided.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
hackread
Record identifier
260ee8dd3be5aa81c6d5832f5235fdfb7ee60351a5a39a4f4260cc6c2e1f5cbe
Enrichment time
2026-10-01T20:51:36Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.