Canadian spy agency reports hacking three criminal groups in 2025
The Canadian Communications Security Establishment (CSE) conducted several authorized cyber operations targeting foreign criminal groups in 2025. These operations aimed to disrupt extremist groups spreading violent ideology and ransomware-as-a-service gangs, with the goal of limiting their activities and impact within Canada and beyond. The agency’s actions represent a proactive approach to national security, mitigating potential threats from organized crime and terrorism.
In 2025, the CSE engaged in a series of targeted cyber operations against various foreign criminal entities. One operation specifically focused on a group linked to the spread of violent extremism, utilizing data gathered from internet-connected devices to dismantle the group’s recruitment and radicalization efforts. The agency successfully degraded the group’s capabilities, hindering their ability to influence potential recruits in Canada and other Western nations.
Furthermore, the CSE targeted a ransomware-as-a-service gang, leveraging signals intelligence to map their operations and subsequently rendering their infrastructure unusable and deleting a significant amount of stolen data intended for sale on the dark web. This action aimed to significantly reduce the gang’s capacity to exploit victims and generate revenue.
The agency also undertook technical disruptions against ten major ransomware gangs, with the objective of making portions of their infrastructure inoperable. These actions underscore Canada’s commitment to proactively addressing cyber threats and protecting its national security interests.