US Government Seizes $1 Million in Bitcoin from Russian Ransomware Gang Behind BlackSuit and Royal

In a major cybercrime crackdown, the U.S. Department of Justice (DOJ) has announced the seizure of $1 million in bitcoin and servers linked to a notorious Russian ransomware gang operating the BlackSuit and Royal malware. The coordinated operation, conducted on July 24, involved global law enforcement agencies from the U.S., Canada, Germany, Ireland, France, and the U.K., among others.

Authorities confiscated four servers and nine domains, disrupting the group’s ability to launch future attacks. In addition to BlackSuit and Royal variants, the ransomware group has attacked critical infrastructure including healthcare, education, public safety, energy, and US Government.

According to the Cybersecurity and Infrastructure Security Agency (CISA), BlackSuit actors have demanded over $500 million USD in ransoms, with the highest single demand reaching $60 million. Since 2022, the gang has compromised more than 450 U.S. victims, netting over $370 million in ransom payments.

In January of last year, a bitcoin exchange account that had been frozen was reopened. US officials emphasized that this operation marks a significant step in combating ransomware attacks and protecting public safety.

With ransomware continuing to pose a serious threat to global security, this seizure underscores the growing international cooperation in the fight against cybercrime.