Signal

US law enforcement seizes RAMP ransomware forum clearnet and .onion domains

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-01-28 17:38 UTCUpdated 2026-01-29 02:17 UTC
rss
law_enforcementransomwarecybercrime_forumsdark_web
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.
2 top sources shown
Russian ransomware forum seized by U.S. law enforcement
DataBreaches.net · News · databreaches.net · 2026-01-29 02:17 UTC
Ransomware crims forced to take off-RAMP as FBI seizes forum
theregister_security · News · go.theregister.com · 2026-01-28 21:26 UTC
limited source diversity in top sources
Overview

US law enforcement actions targeted the infrastructure behind RAMP (Russian Anonymous Marketplace), a Russian-language ransomware-focused forum. Reporting says authorities seized both the forum’s clearnet and .onion domains, disrupting a platform used by ransomware operators and related cybercrime roles.

Score total
1.02
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
Why now
  • Reports say the seizure occurred on Jan. 28, making it a fresh disruption event
  • Both sources highlight RAMP as a major platform, increasing attention to the takedown
  • Domain seizures are immediate-impact actions that can rapidly affect criminal operations
Why it matters
  • Forum seizures can disrupt ransomware operations’ coordination and “business” infrastructure
  • Taking down clearnet and .onion access can reduce reach and resilience of cybercrime platforms
  • Signals continued law-enforcement focus on ransomware ecosystem enablers
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
  • US law enforcement seized RAMP’s clearnet and .onion sites/domains.
  • RAMP was described as a key Russian-language forum used by ransomware operators and related cybercrime participants.
How sources frame it
  • DataBreaches.net: neutral
  • The Register: neutral
Two sources report the same law-enforcement action; merged into a single enforcement-focused narrative.
All evidence
All evidence
Russian ransomware forum seized by U.S. law enforcement
DataBreaches.net · databreaches.net · 2026-01-29 02:17 UTC
Ransomware crims forced to take off-RAMP as FBI seizes forum
theregister_security · go.theregister.com · 2026-01-28 21:26 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
  • DataBreaches.net (1)
  • theregister_security (1)
Top origin domains (this list)
  • databreaches.net (1)
  • go.theregister.com (1)