Particle.news

Download on the App Store

Global Police Operation Dismantles 8Base Ransomware Group

Authorities arrest four suspects in Thailand and seize dark web infrastructure linked to over 1,000 ransomware attacks.

Illustration of a desktop computer wrapped in red tape
Figurines with computers and smartphones are seen in front of the words "Cyber Security" in this illustration taken, February 19, 2024. REUTERS/Dado Ruvic/Illustration/File Photo
illustration of laptop amidts skulls
Image

Overview

  • Four European suspects, linked to the 8Base ransomware gang, were arrested in coordinated raids in Phuket, Thailand.
  • The operation, codenamed 'Phobos Aetor,' involved law enforcement agencies from the U.S., Europe, and Asia, resulting in the seizure of 8Base's dark web leak and negotiation sites.
  • The suspects are accused of using Phobos ransomware to extort $16 million from over 1,000 victims, including 17 Swiss organizations, between 2022 and 2025.
  • Authorities confiscated over 40 pieces of evidence, including laptops, mobile devices, and cryptocurrency wallets, and took down more than 100 servers connected to the gang.
  • The U.S. Justice Department has unsealed charges against two suspects, while Swiss and U.S. authorities are pursuing extradition for all four individuals.