Phobos Ransomware Administrator Extradited to Face Several Cybercrime Charges
Published
- A Russian national suspected of being behind Phobos Ransomware operations was extradited to the U.S. from South Korea.
- The individual is charged with multiple counts, including wire fraud conspiracy, computer fraud, and extortion.
- The indictment alleges that the hacker operated a Ransomware-as-a-Service website with his co-conspirators.
Evgenii Ptitsyn, a Russian national, has been extradited from South Korea to the U.S. to face serious charges related to his alleged role in administering the notorious Phobos ransomware. Ptitsyn is accused of facilitating the sale, distribution, and operation of the ransomware, which targeted over 1,000 entities, demanding more than $16 million in ransom payments.
The U.S. Department of Justice (DoJ) unveiled criminal charges against Ptitsyn, aged 42, for allegedly coordinating an international hacking and extortion conspiracy through Phobos ransomware.
The indictment alleges that Ptitsyn and his co-conspirators operated a darknet website for the sale of Phobos ransomware, facilitating numerous attacks by various criminal affiliates.
Ptitsyn is charged with multiple counts, including wire fraud conspiracy, computer fraud, and extortion. If convicted, he faces significant prison sentences for each charge. The FBI, in partnership with international law enforcement, continues to prioritize the disruption of cybercriminal networks.
“The Justice Department is leveraging international partnerships to combat ransomware threats like Phobos,” stated Deputy Attorney General Lisa Monaco. In collaboration with law enforcement agencies across South Korea, Japan, Europe, and the U.S., this operation underscores a unified global commitment to bringing cybercriminals to justice.
Principal Deputy Assistant Attorney General Nicole M. Argentieri emphasized the far-reaching impact of Phobos ransomware, which not only targeted large corporations but also endangered schools, hospitals, and critical infrastructure.
This month, a hacker known online as Judische and Waifu was arrested by authorities in Canada on suspicion of involvement in the Snowflake breach. In August, the suspected leader of Reveton and Ransom Cartel cybercriminal groups was detained after being deported from the European Union.
