Global: Dispossessor Ransomware Group Disbanded by US and European Authorities

Authorities in the United States and Germany announced on Tuesday the dismantling of the notorious ransomware group Radar/Dispossessor, which has targeted numerous companies across various sectors, including healthcare and transportation.

Founded in August 2023 and operating under the alias “Brain,” the group initially focused on small to medium-sized businesses in the US before expanding its reach internationally.

The joint investigation revealed that 43 companies from countries such as Argentina, Australia, Belgium, Brazil, Honduras, India, Canada, Croatia, Peru, Poland, the United Kingdom, the United Arab Emirates, and Germany had been victimized by the group. However, it is likely that many more companies were affected but have not yet been identified.

The group exploited vulnerabilities in computer systems, such as weak passwords and the absence of two-factor authentication, to gain access to IT systems and hold data for ransom. In the US, the group notably targeted hospitals, causing significant concern.

Authorities have taken significant steps to disrupt the group’s operations, dismantling servers and domains associated with the group in Germany, the US, and the UK.

Twelve suspects from Germany, Ukraine, Russia, Kenya, Serbia, Lithuania, and the United Arab Emirates have been identified. Efforts are now focused on locating additional suspects and uncovering more information about other affected companies.