The FBI has seized the RAMP cybercrime forum, shutting down a major online hub for ransomware tools in a coordinated law enforcement action.

RAMP, a predominantly Russian-language cybercrime marketplace that brazenly marketed itself as the “only place ransomware allowed,” has had both its dark web and clear web domains seized by the FBI as part of a broader effort to curb ransomware attacks targeting organizations and critical infrastructure worldwide.
Visitors attempting to access either site on Wednesday were met with identical seizure notices stating that the FBI had taken control of the RAMP domains. The takedown marks a significant blow to one of the few remaining cybercrime forums that had continued to operate largely unchecked, following recent law enforcement actions against similar platforms, including XSS, whose alleged administrator was arrested by Europol last year.
With rival forums dismantled, RAMP had emerged as a central hub for ransomware operators and other cyber-criminals to buy, sell, and trade tools and services. That role has now come to an abrupt end.
A banner displayed on the seized sites read, “The Federal Bureau of Investigation has seized RAMP,” alongside the seals of the FBI and the US Department of Justice. The notice said the action was carried out in coordination with the US Attorney’s Office for the Southern District of Florida and the DOJ’s Computer Crime and Intellectual Property Section. The banner also featured RAMP’s former slogan, underscoring the forum’s explicit embrace of ransomware activity.
Reports are sourced from official documents, law-enforcement updates, and credible investigations.
Discover additional reports, market trends, crime analysis and Harm Reduction articles on DarkDotWeb to stay informed about the latest dark web operations.






