logo

Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead

ID: d63ad98e-bd7b-5494-adf2-78a11e1d2335

STIX ID: report--d63ad98e-bd7b-5494-adf2-78a11e1d2335

Feed Name: The Register (Security)

Threat Score
65/100

Date Published: 2026-10-08

Date Updated: 2026-10-09

...
...

The U.S. Department of Justice charged Zohar Pinhasi, operator of MonsterCloud, alleging he told ransomware victims he could decrypt files using proprietary tools but instead paid attackers and kept large markups; the indictment claims he charged clients more than $19 million and paid over $8 million in ransoms, faces wire fraud and conspiracy counts, and is under FBI investigation with potential additional co-conspirators.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.