logo

Russian suspected Phobos ransomware admin extradited to US over $16M extortion

ID: 66c3595d-d42a-5ae8-b0c4-7b64173a3fb0

STIX ID: report--66c3595d-d42a-5ae8-b0c4-7b64173a3fb0

Feed Name: The Register (Security)

Threat Score
75/100

Date Published: 2024-11-19

Date Updated: 2026-04-26

Author: Iain Thomson

...
...

A Russian national, Evgenii Ptitsyn, was extradited from South Korea to the United States and charged with operating as an IT administrator for the Phobos ransomware operation; U.S. prosecutors allege the affiliate-style scheme enabled actors to extort roughly $16 million from thousands of victims—including businesses, hospitals, schools, and nonprofits—by using unique affiliate wallets and per-decryption fees, and Ptitsyn now faces multiple federal charges that carry substantial prison terms.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.