Overview

• Four European suspects, linked to the 8Base ransomware gang, were arrested in coordinated raids in Phuket, Thailand.
• The operation, codenamed 'Phobos Aetor,' involved law enforcement agencies from the U.S., Europe, and Asia, resulting in the seizure of 8Base's dark web leak and negotiation sites.
• The suspects are accused of using Phobos ransomware to extort $16 million from over 1,000 victims, including 17 Swiss organizations, between 2022 and 2025.
• Authorities confiscated over 40 pieces of evidence, including laptops, mobile devices, and cryptocurrency wallets, and took down more than 100 servers connected to the gang.
• The U.S. Justice Department has unsealed charges against two suspects, while Swiss and U.S. authorities are pursuing extradition for all four individuals.