Four Russians Arrested in Phobos Ransomware Crackdown, Says Europol

"Europol arrests four Russians linked to Phobos ransomware, dismantling 27 servers in a major international cybercrime crackdown."

PARIS – Europol announced the arrest of four Russian nationals suspected of deploying a variant of Phobos ransomware to extort payments from victims across Europe and beyond.

A coordinated operation involving law enforcement agencies from 14 countries led to the arrests, targeting members of the 8Base ransomware group. Authorities also dismantled 27 servers linked to the criminal network, Europol stated on Tuesday.

Global Crackdown on Phobos Ransomware

This latest crackdown follows a series of high-profile arrests targeting Phobos ransomware operators. Law enforcement agencies have been able to alert over 400 companies worldwide about ongoing or imminent ransomware attacks.

In June 2024, a Phobos administrator was arrested in South Korea and later extradited to the United States, where he faces charges for ransomware attacks that encrypted critical infrastructure, business systems, and personal data. Additionally, a key Phobos affiliate was arrested in Italy in 2023 under a French warrant, further weakening the network behind the ransomware.

Phobos ransomware is commonly used against small and medium-sized businesses, which often lack strong cybersecurity defenses, making them prime targets for such attacks.

Authorities continue to intensify efforts to dismantle ransomware operations worldwide, working across borders to track down cybercriminal networks.

4o