News report

# BlackCat ransomware shuts down in exit scam, blames the “feds”

BleepingComputer, March 5, 2024. ALPHV/BlackCat's March 2024 shutdown as an exit scam: the gang posted a fake law-enforcement seizure banner on its data leak site while Europol and the NCA told BleepingComputer they had no involvement in any recent disruption of ALPHV infrastructure..

**Source type:** News report

**Published:** March 5, 2024

**Research grade:** S1

**Used in entries:** 2

## Bibliographic record

**Publisher:** BleepingComputer

**Published:** March 5, 2024

**Source type:** News report

**Research grade:** Source grade S1

**Language:** English

**Official record:** Not an official publication

**Address:** [https://www.bleepingcomputer.com/news/security/blackcat-ransomware-shuts-down-in-exit-scam-blames-the-feds/](https://www.bleepingcomputer.com/news/security/blackcat-ransomware-shuts-down-in-exit-scam-blames-the-feds/)

**What it supports:** ALPHV/BlackCat's March 2024 shutdown as an exit scam: the gang posted a fake law-enforcement seizure banner on its data leak site while Europol and the NCA told BleepingComputer they had no involvement in any recent disruption of ALPHV infrastructure.

**Dataset id:** src\_bleepingcomputer\_blackcat\_exit\_scam\_2024

## Research notes

- By Ionut Ilascu.

How this source is used

Cited 2 times across 2 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[ALPHV/BlackCat disruption](https://takedownindex.org/takedowns/alphv-blackcat-disruption)

Ransomware, December 2023

Supporting source

### Later activity

1 citation

Cited for activity recorded after the takedown.

-
[RansomHub extortion of Change Healthcare by former ALPHV affiliate Notchy](https://takedownindex.org/takedowns/alphv-blackcat-disruption)

Partial operator continuity, ALPHV/BlackCat disruption

Later outcome

[All sources](https://takedownindex.org/sources)