Canada and ICE collaborate to dismantle notorious ransomware group

By Bernard Rizk

Media Relations Advisor, uOttawa

Canada and ICE collaborate to dismantle notorious ransomware group
Photo: pexels.com
Academic experts available to provide context or comment on the following topic:

Canada and ICE collaborate to dismantle notorious ransomware group

Members of the media may directly contact:


 

Umar Ruhi (English only)

Full Professor, Telfer School of Management

[email protected]

Professor Ruhi’s expertise includes information systems, digital enterprise strategy and cybersecurity management.

"This takedown is necessary, but unfortunately not sufficient. While it dents capacity, history shows us that attackers adapt and pivot infrastructure easily. Coordinated law enforcement needs to treat the money as the center of gravity: pursuing aggressive, cross-border asset freezes while maintaining continuous pressure on affiliate networks. But we must also match this with building up our own resilience, from households to hospitals, so that when criminals pivot, they hit costly dead ends instead of easy targets."



 

Amir Razavi ( English only)

Part-time Professor, School of Electrical Engineering and Computer Science, Faculty of Engineering

[email protected]

Professor Razavi’s experience includes cybersecurity, and behavioral analysis, with a particular focus on cyber threat intelligence (CTI), data loss prevention (DLP), fraud detection and the prevention and detection of cyberattacks.

“Operation Checkmate’s takedown of BlackSuit/Royal; seizing four servers, nine domains, and ~US$1.09M—targets a gang tied to 450+ U.S. victims and ~US$370M in ransoms; it’s a real win for Canada–U.S. collaboration, and lasting safety now depends on arrests plus basics like rapid patching, offline backups, MFA, and transparent victim reporting.”