US charges Phobos ransomware admin after South Korea extradition

U.S. authorities extradited Evgenii Ptitsyn from South Korea and charged him as an alleged administrator of the Phobos ransomware-as-a-service; court documents link Phobos to breaches of over 1,000 organizations worldwide and more than $16 million in ransom payments. The report explains the RaaS affiliate model used to deploy the ransomware (using stolen credentials, unique decryption keys tied to affiliate cryptocurrency wallets) and notes a 13-count indictment including wire fraud, computer fraud, and extortion.