Thai police have accused four Russians of carrying out a ransomware attack on a Swiss company

ChainCatcher news, under international coordination efforts, law enforcement in Phuket, Thailand, detained four Russian citizens on Monday who are suspected of carrying out ransomware attacks. The suspects are believed to be members of the 8Base organization that utilized Phobos ransomware, attacking 17 Swiss companies between April 2023 and October 2024.

The suspects are accused of infiltrating the networks of several European companies, encrypting data, and demanding payment in cryptocurrency for decryption fees. Phobos ransomware typically targets small and medium-sized enterprises lacking robust cybersecurity measures. In addition to these incidents, the suspects are also linked to approximately 1,000 victims globally, with around $16 million in Bitcoin stolen.

The 8Base organization has been identified as a key player in the ransomware ecosystem. The suspects are currently awaiting extradition to face charges related to their alleged involvement in the ransomware attacks.