FlagThis - #arrest

A cybercriminal responsible for over 90 data leaks has been apprehended in Bangkok following a joint operation between the Royal Thai Police and the Singapore Police Force. The individual, known under aliases such as ALTDOS, DESORDEN, GHOSTR, and 0mid16B, targeted 65 organizations in the Asia-Pacific region and an additional 25 global targets. Between 2020 and February 2025, the hacker exfiltrated a staggering 13 terabytes of sensitive data from various sectors, including healthcare and finance.

The arrest marks a significant win in the fight against cybercrime, with authorities seizing laptops and other electronic devices during the raid in Thailand. Investigations revealed the suspect's involvement in attacks affecting multinational corporations, small businesses, and government databases across several countries, including Thailand, India, Indonesia, the UK, and the United States. The hacker allegedly worked alone, selling stolen data. The cybercriminal initially focused on Thai entities, later expanding operations across the Asia-Pacific region.


References :

• gbhackers.com: Authorities Arrested Hacker Behind 90 Major Data Breaches Worldwide
• DataBreaches.Net: Criminal hacker known as ALTDOS, DESORDEN, GHOSTR and 0mid16B arrested
• CyberInsider: Cybercriminal Behind 90+ Data Leaks Arrested in Bangkok

Classification:

• HashTags: #Cybercrime #DataBreach #Arrest
• Target: Various organizations
• Attacker: ALTDOS
• Feature: Data breaches
• Type: DataBreach
• Severity: Major

A global law enforcement operation has successfully disrupted the 8Base ransomware group, leading to the arrest of four individuals accused of being key figures in the operation. The suspects were apprehended in Phuket, Thailand, and are alleged to have amassed $16 million through ransomware attacks targeting over 1,000 organizations worldwide. Authorities have also seized the dark web infrastructure utilized by the group.

This coordinated effort resulted in the dismantling of 8Base's dark web data leak and negotiation sites, effectively crippling their ability to further extort victims. The operation, codenamed "Phobos Aetor", involved coordinated raids across multiple locations, resulting in the seizure of laptops, smartphones, and cryptocurrency wallets.


References :

• BleepingComputer: A global law enforcement operation targeting the Phobos ransomware gang has led to the arrest of four suspected hackers in Phuket, Thailand, and the seizure of 8Base's dark web sites. The suspects are accused of conducting cyberattacks on over 1,000 victims worldwide.
• Carly Page: A global law enforcement operation has led to the arrest of four individuals who authorities accuse of being key figures in the 8base ransomware operation. The four suspects are accused of amassing $16 million through ransomware attacks against more than 1,000 organizations globally
• securityaffairs.com: Operation Phobos Aetor: Police dismantled 8Base ransomware gang
• BleepingComputer: A global law enforcement operation targeting the Phobos ransomware gang has led to the arrest of four suspected hackers in Phuket, Thailand, and the seizure of 8Base's dark web sites. The suspects are accused of conducting cyberattacks on over 1,000 victims worldwide. [...]
• cyberscoop.com: Thai authorities detain four Europeans in ransomware crackdown
• The Register - Security: All your 8Base are belong to us: Ransomware crew busted in global sting
• socradar.io: International Operation Targets 8Base and Phobos Ransomware Gangs
• securityboulevard.com: Authorities Seize 8Base Ransomware Infrastructure, Arrest Four Russians
• techcrunch.com: Authorities arrest four suspects in global 8base ransomware takedown

Classification:

• HashTags: #8Base #Ransomware #Cybercrime
• Target: Over 1,000 organizations globally
• Attacker: 8Base
• Type: Hack
• Severity: Major

A global police operation involving agencies from Europe, Japan, the U.S., and the U.K. has successfully seized the dark web leak site of the 8Base ransomware gang. The takedown message displayed on the site was confirmed as legitimate by Lucy Sneddon, a spokesperson for the U.K.’s National Crime Agency. While the U.K. played a supportive role, other involved agencies have not yet commented. Security researchers first noticed the seizure notice earlier this week.

This operation is part of a larger effort targeting ransomware gangs. In a related development, authorities have arrested four suspected Phobos ransomware hackers in Phuket, Thailand. These individuals are accused of conducting cyberattacks on over 1,000 victims worldwide and extorting $16,000,000 worth of Bitcoin. The operation, codenamed "Phobos Aetor," involved raids across multiple locations.


References :

• CyberInsider: Phobos Ransomware Gang Dismantled in International Sting
• BleepingComputer: Police arrests 4 Phobos ransomware suspects, seizes 8Base sites
• BleepingComputer: A global law enforcement operation targeting the Phobos ransomware gang has led to the arrest of four suspected hackers in Phuket, Thailand, and the seizure of 8Base's dark web sites. The suspects are accused of conducting cyberattacks on over 1,000 victims worldwide.
• bsky.app: A global law enforcement operation targeting the Phobos ransomware gang has led to the arrest of four suspected hackers in Phuket, Thailand, and the seizure of 8Base's dark web sites. The suspects are accused of conducting cyberattacks on over 1,000 victims worldwide.
• Carly Page: Mastodon post confirming the takedown of 8Base's leak site.
• techcrunch.com: TechCrunch reports on the global police operation seizing the 8base ransomware gang leak site.
• www.bleepingcomputer.com: BleepingComputer's report on the takedown of 8Base's dark web sites.
• DataBreaches.Net: Reports on police arresting 4 Phobos ransomware suspects and seizing 8Base sites.
• Threats | CyberScoop: cyberscoop article on 8base
• cyberscoop.com: Thai authorities detain four Europeans in ransomware crackdown
• Anonymous ???????? :af:: A global law enforcement operation targeting the Phobos ransomware gang has led to the arrest of four suspected hackers in Phuket, Thailand, and the seizure of 8Base’s dark web sites.
• The Register - Security: The Register: All your 8Base are belong to us: Ransomware crew busted in global sting
• securityaffairs.com: Report on the 8Base ransomware takedown highlighting the international collaboration.
• The Hacker News: The Hacker News: 8Base Ransomware Data Leak Sites Seized in International Law Enforcement Operation
• www.helpnetsecurity.com: The Thai police has arrested four individuals suspected of being the leaders of the 8Base ransomware group and of stealing approximately $16 million from 1,000+ victims they targeted with the Phobos ransomware.
• BleepingComputer: Police arrests 2 Phobos ransomware suspects, seizes 8Base sites - BleepingComputer
• socradar.io: International Operation Targets 8Base and Phobos Ransomware Gangs In a coordinated global effort, law enforcement agencies have successfully dismantled the dark web infrastructure of the 8Base ransomware gang and arrested four individuals linked to the Phobos ransomware.
• Help Net Security: 8Base ransomware group leaders arrested, leak site seized
• PCMag UK security: An international operation has dealt a major blow to a cybergang known as 8Base, which used the Phobos to infect hundreds of companies and organizations.
• techcrunch.com: Authorities arrest four suspected 8base ransomware operators in global takedown
• www.europol.europa.eu: Report on the global law enforcement operation that led to the arrests.
• Security Boulevard: Authorities Seize 8Base Ransomware Infrastructure, Arrest Four Russians
• securityboulevard.com: With "Operation Phobos Aetor," international law enforcement, including the US DOJ and Europol, arrest four Russian nationals and seize infrastructure connected to the 8Bbase ransomware group, the largest affiliate of the prolific Phobos RaaS operation.
• securityaffairs.com: Global law enforcement operation targeting the 8Base ransomware gang and related criminal activity.
• Carly Page: A global law enforcement operation has led to the arrest of four individuals who authorities accuse of being key figures in the 8base ransomware operation. The four suspects are accused of amassing $16 million through ransomware attacks against more than 1,000 organizations globally
• www.csoonline.com: Law enforcement agencies from 14 countries collaborated in an investigation against the related Phobos and 8Base ransomware operations, arresting four suspects and seizing 27 servers, including the data leak and ransom negotiation websites.

Classification:

• HashTags: #8Base #Ransomware #LawEnforcement
• Target: 8Base Ransomware Gang
• Attacker: 8Base Ransomware Gang
• Malware: 8Base Ransomware
• Type: Ransomware
• Severity: Major