The FBI, in collaboration with international law enforcement agencies, has successfully dismantled the infrastructure of the Radar/Dispossessor ransomware operation. This joint operation, involving the U.K.’s National Crime Agency, Germany’s Bamberg Public Prosecutor’s Office, and the Bavarian State Criminal Police Office, led to the seizure of multiple servers and domains in the U.S., U.K., and Germany. The operation marked a significant disruption of a ransomware group believed to have been established by former affiliates of the notorious LockBit ransomware enterprise. The FBI announced the takedown of three (3) U.S. servers, three (3) U.K. servers, eighteen (18) German servers, and nine (9) domains which were part of the Radar/Dispossessor’s operational network. The Radar/Dispossessor group emerged in August 2023, quickly developing into a significant ransomware threat. The group is believed to be led by an individual known as “Brain” and has targeted small to mid-sized businesses across various sectors including education, healthcare, financial services, and transportation. The ransomware gang operates on a ransomware-as-a-service (RaaS) model, using dual extortion tactics where they exfiltrate data before encrypting systems to maximize their leverage over victims. The FBI identified forty-three (43) victims of the Radar/Dispossessor attacks, spanning multiple countries including the U.S., Argentina, Australia, Belgium, Brazil, Canada, Croatia, Germany, Honduras, India, Peru, Poland, the U.A.E., and the U.K. The group’s attack methodology involves exploiting security vulnerabilities, weak passwords, and lack of multi-factor authentication (MFA) to breach networks, steal data, and deploy ransomware. Cybersecurity experts have noted that Radar/Dispossessor’s leak site and operational methods bear striking similarities to LockBit, suggesting a possible rebranding or leveraging of LockBit’s infrastructure. The takedown of Radar/Dispossessor is part of a broader effort by global law enforcement to combat the growing threat of ransomware, which has seen a rise in attacks facilitated by vulnerabilities and weak security measures in targeted organizations.