The FBI has seized management of RAMP, a infamous cybercrime on-line discussion board that bragged to be “the one place ransomware allowed.”
Each the discussion board’s presence on the darkish net and on its common web site area now show a discover from the FBI introduced that it has been taken over by the legislation enforcement company.
Based on the message posted on the seized web sites, it was seized by the FBI in collaboration with the US Legal professional’s Workplace for the Southern District of Florida and the US Justice Division’s Pc Crime and Mental Property Part (CCIPS).
The seizure banner comes full with a cheeky addition – a winking Masha from the favored Russian youngsters’s TV cartoon collection “Masha and the Bear.”
Positive sufficient, RAMP’s nameservers now level to ns1.fbi.seized.gov and ns2.fbi.seized.gov, confirming they’ve been seized by US legislation enforcement.
RAMP – the Russian Nameless MarketPlace – first emerged in mid-2021. It shortly turned common, filling a void within the cybercriminal ecosystem, after different main Russian-language hacking boards banned ransomware-related content material following stress within the aftermath of the Colonial Pipeline assault by the DarkSide gang.
RAMP served as a market the place ransomware operators might recruit associates, the place preliminary entry brokers might promote credentials for compromised enterprise networks, and the place cybercriminals might commerce their stolen knowledge and instruments.
Many notorious ransomware teams, equivalent to ALPHV/BlackCat, Qilin, DragonForce, and RansomHub would use the RAMP platform to advertise their operations.
The location was definitely common, boasting in extra of 14,000 customers though it requested proof of two months’ exercise on different hacking boards or a US $500 payment to hitch.
Issues began to go badly improper for RAMP, nevertheless, when one of many people behind the discussion board was named as Russian nationwide Mikhail Matveev (also called “Orange”, “Wazawaka”, and “BorisElcin.” Matveev was listed on the FBI’s most needed checklist, and was subsequently (and unusually) arrested in Russia in 2024.
Following the seizure of RAMP, one other of the discussion board’s alleged operators, confirmed the takedown in a posting on one other hacking discussion board.
“This occasion destroyed years of my work to create probably the most free discussion board on this planet, and though I hoped at the present time would by no means come, deep down I all the time understood that it was attainable,” wrote “Stallman”. “That is the danger all of us take.”
As Flare reviews, “Stallman” has indicated that the cybercriminal exercise performed by means of RAMP would proceed by means of different channels.
A seizure like this isn’t going to eradicate ransomware in a single day, but it surely does signify a significant disruption of cybercriminal infrastructure, as hackers might be pressured emigrate their actions, and might be introduced with new challenges associated to their operational safety and who they will belief.
In any case, the seizure of RAMP means that the authorities now have entry to the positioning’s person knowledge – which is prone to embrace e-mail and IP addresses, non-public messages, and extra, which might result in arrests within the coming months.
