FBI seizes RAMP ransomware marketplace

FBI seizes RAMP ransomware marketplace — Cdn.arstechnica.net
Image source: Cdn.arstechnica.net

The FBI has seized RAMP, the predominantly Russian-language online bazaar that billed itself as the "only place ransomware allowed." Visits to RAMP's dark-web and clear-web domains on Wednesday returned pages saying the FBI had taken control, with a banner stating, "I regret to inform you \"The Federal Bureau of Investigation has seized RAMP,\"" and noting the action was taken in coordination with the United States Attorney’s Office for the Southern District of Florida and the Computer Crime and Intellectual Property Section of the Department of Justice.

RAMP, which Rapid7 says was founded in 2012 and rebranded in 2021, served Russian, Chinese, and English speakers and counted more than 14,000 registered users. Members underwent strict vetting before being accepted or paid a $500 fee for anonymous participation, the report says. The platform provided discussion groups, cyberattack tutorials, and a marketplace for malware and services.

After takedowns of other forums such as XSS, whose leader was arrested by Europol last year, RAMP became one of the leading places for people pushing ransomware and other online threats to buy, sell, or trade products and services. A banner on the seized domains included a graphic that had appeared on the RAMP site and that billed the platform as the "only place ransomware allowed." The site's chief administrator said in 2024 the forum earned $250,000 annually, the report says.

ramp, fbi, ramp seizure, ramp dark web, ramp clear web, ransomware marketplace, malware marketplace, rapid7 report, united states attorney's office, southern district of florida, computer crime and intellectual property section, department of justice, europol, xss forum, xss leader arrested, 14,000 registered users, $500 fee, anonymous participation, cyberattack tutorials, discussion groups, rebranded 2021, founded 2012, chief administrator, $250,000 annual earnings, vetting process, online crime forums, russian speakers, chinese speakers, english speakers, seized domains

Latest in