RAMP ransomware forum goes dark in probable FBI sting | Computer Weekly

"Although at the time of writing, no official announcement has been made by the Americans, within the past 24 hours both RAMP's dark and public web sites have been replaced with seizure notices stating the action was taken under the auspices of the FBI, the US Attorney's Office for the Southern District of Florida, and the Department of Justice's (DoJ's) Computer Crime and Intellectual Property Section."

"It is not unheard of for cyber criminals to fake takedowns, often amid juvenile theatrics, to start over with a 'clean' slate, but initial reports appear to verify the authenticity of the takedown, with DNS records showing RAMP's web domains now point to FBI infrastructure. The alleged operator of RAMP, a hacker going by the handle Stallman, who according to Recorded Future took over its operations about four years ago, also stated the forum was no more."

"Set up around 2021, RAMP operated as both a discussion forum and an underground marketplace, with ransomware kits, malware, alongside a library of ransomware guides and tutorials for newbies. In a post on the XSS hacking forum, translated from the original Russian, Stallman said the takedown had "destroyed years of my work". "Although I hoped that this day would never come, deep down I always understood that it was possible. This is the risk we all take," they wrote."

RAMP, a Russian‑language cybercrime forum and marketplace set up around 2021, has gone dark following apparent US law‑enforcement action. Both RAMP's dark and public websites were replaced with seizure notices citing the FBI, the US Attorney's Office for the Southern District of Florida, and the DoJ's Computer Crime and Intellectual Property Section. DNS records now point RAMP domains to FBI infrastructure, supporting the takedown's authenticity. The alleged operator, Stallman, posted that the action destroyed years of their work and acknowledged the risk. RAMP provided ransomware kits, malware, and a library of ransomware guides and tutorials. Access was tightly restricted, with fees and activity requirements. A Rapid7 summer 2024 analysis found several thousand members and estimated revenues of about $250,000.

Read at ComputerWeekly.com