Bleepingcomputer

FBI Seizes RAMP Cybercrime Forum Used by Ransomware Gangs

First seen 29 Jan 2026, 01:28 UTC • •52.3

Article Content

1 / 17

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

The FBI has seized the RAMP cybercrime forum, a key platform for ransomware operations and other digital crimes. Both the forum's dark web and clearnet domains now display a seizure notice attributed to the FBI, indicating a significant blow to ransomware-as-a-service gangs and other cybercriminals.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 217d ago How this analysis works

More articles in this cluster (16)

Threat Graph

8 entities, 15 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Malware
Ransomware

Threat Actor (5)

ramp
DarkSide
DragonForce
Nova
REvil

Vulnerability (1)

XSS

Relationships

ramp uses Malware
ramp uses Ransomware
DarkSide uses Malware
DarkSide uses Ransomware
DragonForce uses Malware
DragonForce uses Ransomware
Nova uses Malware
Nova uses Ransomware
REvil uses Malware
REvil uses Ransomware
ramp exploits XSS
DarkSide exploits XSS
DragonForce exploits XSS
Nova exploits XSS
REvil exploits XSS

Following this threat?

Track ramp in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical XSS Vulnerability in SUSE Rancher Exposes Admin Sessions A critical vulnerability (CVE-2026-88804) in SUSE Rancher allows unauthenticated remote attackers to execute stored cross-site scripting (XSS) attacks via public UI settings. This affects Rancher versions 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14, and 2.11 before 2.11.18.…

Multiple WordPress Plugins Face Vulnerabilities Requiring Immediate Updates Three WordPress plugins have been reported with vulnerabilities: the GiveWP plugin (version 4.16.9) has a Cross Site Scripting (XSS) vulnerability, while both the Siteskite (version 2.1.8) and Cartflows (version 3.2.0) plugins have Remote Code Execution (RCE) vulnerabilities. The XSS vulnerability allows attackers to…