Phobos ransomware admin pleads guilty to wire fraud conspiracy

Phobos, a long-running ransomware-as-a-service linked to the Crysis family, has been operated by affiliates who used stolen credentials to breach networks, exfiltrate data, and encrypt victims' files; the operation collected over $39 million from more than 1,000 victims. U.S. authorities extradited and secured a guilty plea from a suspected Phobos administrator (Evgenii Ptitsyn) and international law enforcement efforts (Operation Aether) have led to arrests and infrastructure seizures that disrupted the RaaS operation.