RAMP seized, nearly 324,000 BreachForums accounts exposed, and Telegram facing scrutiny – ransomware’s core infrastructure is under growing pressure in early 2026.