In the increasingly complex international cybersecurity landscape, law enforcement agencies continue their battle against online criminal platforms. The latest success in this area is represented by the operation that led to the seizure of a major Russian cybercrime forum, primarily used for ransomware-related activities.
On January 28, 2026, the FBI seized the Russian Anonymous Marketplace (RAMP), a Russian-language cybercrime forum active since 2021. RAMP served as a platform for ransomware operations, malware, exploits, and initial access broker services. Both the Tor site on the dark web and the clearnet domain (ramp4u.io) now display FBI seizure notices. The operation was coordinated by the FBI, the United States Attorney’s Office for the Southern District of Florida, and the Computer Crime and Intellectual Property Section (CCIPS) of the Department of Justice. An alleged former operator of RAMP, known by the pseudonym “Stallman”, confirmed the seizure on the XSS hacking forum. At the time of the seizure, no official arrests had been announced.
This intervention represents a significant blow to the criminal ransomware ecosystem, which in recent years has caused billions in damages to organizations worldwide. RAMP had become a reference point for cybercriminals, facilitating the buying and selling of malicious tools and initial access to compromised networks, essential elements for ransomware operations. The seizure demonstrates the growing capability of law enforcement to strike seemingly secure criminal infrastructures in the dark web.
For businesses and users, this seizure might lead to a temporary decrease in certain types of attacks, but it is unlikely to completely eliminate the ransomware threat. Organizations should continue to maintain solid cybersecurity practices, including regular backups, system updates, and employee training on recognizing phishing attempts. It is also advisable to closely monitor networks for suspicious activities and maintain updated incident response plans.
- Key points to remember:
- The FBI has seized RAMP, a major Russian cybercrime forum active since 2021, disrupting a key channel for ransomware operations
- The operation demonstrates the growing effectiveness of international collaboration against criminal infrastructures in cyberspace
- Despite this success, organizations must maintain high cybersecurity standards as criminals will tend to adapt and find new channels
Sources:
https://www.bleepingcomputer.com/news/security/fbi-seizes-ramp-cybercrime-forum-used-by-ransomware-gangs/
https://www.theregister.com/2026/01/28/fbi_seizes_ramp_forum/
https://www.infosecurity-magazine.com/news/fbi-takes-down-ramp-ransomware/
Source: The Record