GHOSTR Hacker Linked to 90+ Data Breaches Arrested

**Executive summary:** Law enforcement in Thailand and Singapore, with assistance from cybersecurity firm Group-IB, arrested a hacker known by multiple aliases (GHOSTR / ALTDOS / DESORDEN / 0mid16B) tied to over 90 data breaches and the theft and sale of roughly 13 TB of sensitive information. The actor exploited SQL injection (sqlmap), weak RDP, and used a modified Cobalt Strike for persistence, extorted victims and sold stolen databases on dark web forums, impacting healthcare, finance, e‑commerce, logistics and other sectors across APAC, Europe, North America and the Middle East.