Weekly Intelligence Summary 25 June

June 25, 2021

In an internationally coordinated operation, law-enforcement officials from the Ukraine, US, and South Korea raided homes and vehicles associated with members of the “Clop” ransomware group in Kiev, Ukraine. Several Clop members were arrested in association with money laundering, and the officials seized infrastructure the group has used in ransomware attacks globally. This latest operation follows similar raids on the “NetWalker” and “Egregor” ransomware groups in early 2021; it is unlikely to have a significant impact on the wider ransomware landscape, and only momentarily disrupted Clop’s operations. Regardless, the crackdown highlights a continued international effort to hold ransomware extortion groups to account.