Security News > 2023 > October > Ragnar Locker ransomware’s dark web extortion sites seized by police
The Ragnar Locker ransomware operation's Tor negotiation and data leak sites were seized Thursday morning as part of an international law enforcement operation.
A Europol spokesperson has confirmed the seizure message is legitimate as part of an ongoing action targeting the Ragnar Locker ransomware gang and that a press release will be published tomorrow.
Ragnar Locker is one of the longest-running ransomware operations at this time, launching at the end of 2019 as they began targeting the enterprise.
Like other ransomware operations, Ragnar Locker would breach corporate networks, spread laterally to other devices while harvesting data, and then encrypt the computers on the network.
Unlike most modern operations, Ragnar Locker was not considered a Ransomware-as-a-Service that actively recruited outside affiliates to breach networks and deploy the ransomware, earning a revenue share in the process.
A new ransomware operation named DarkAngels was seen utilizing Ragnar Locker's original ESXi encryptor in an attack on Industrial giant Johnson Controls.