Phobos Ransomware Group Dismantled in International Crackdown

The U.S. Department of Justice has charged two Russian nationals, Roman Berezhnoy and Egor Nikolaevich Glebov, for their roles in the Phobos ransomware group, which extorted over $16 million from more than 1,000 victims, including hospitals and educational institutions. Their arrests were part of a coordinated international operation that involved law enforcement from 14 countries and the seizure of 27 servers linked to the group, which has been a significant player in the ransomware landscape. Phobos operates under a ransomware-as-a-service model, allowing freelance hackers to use their malware for attacks. The crackdown on Phobos follows earlier arrests, including a key administrator apprehended in South Korea in June 2024. As ransomware attacks continue to pose threats to various sectors, the DOJ's actions highlight the importance of international cooperation in combating cybercrime. This series of arrests serves as a reminder that cybercriminals are not immune to law enforcement efforts.