Overview
- Federal prosecutors in the Eastern District of New York returned an indictment on September 23 and Zohar Pinhasi pleaded not guilty at his federal arraignment Wednesday before being released on a $2 million bond.
- The indictment accuses Pinhasi of falsely claiming MonsterCloud used proprietary decryption tools while instead contacting ransomware operators and buying decryption keys to restore clients' files.
- Prosecutors cite specific episodes where Pinhasi allegedly paid roughly $8,200 and $236,000 to attackers but billed victims about $150,000 and $380,000 respectively as part of the scheme.
- Across the alleged scheme from 2018 to 2023, authorities say Pinhasi facilitated more than $8 million in ransom payments and billed clients more than $19 million for recovery services.
- The charges come after earlier reporting that raised similar concerns and they warn of wider effects on victim trust and industry oversight as law enforcement presses for accountability.