$16 Million Ransomware Operation Shut Down: 8Base Masterminds Apprehended

The UK’s National Crime Agency (NCA), in conjunction with Europol, the US Federal Bureau of Investigation, the Bavarian Police, and Thai law enforcement, recently announced the arrest of several members of the notorious 8Base ransomware syndicate.

Active since 2022, the 8Base ransomware group has targeted over 1,000 victims worldwide, extorting an estimated $16 million in ransom payments.

Law enforcement agencies in the United States, Europe, and Asia have been conducting a covert investigation into the ransomware group, culminating in the recent seizure of 8Base’s website, which was used to publish data to coerce victims.

At the behest of Europol, Thai police conducted a raid in Phuket, apprehending four suspects, all European nationals residing in Phuket.

During the operation, Thai authorities seized over 40 pieces of evidence, including smartphones, laptops, and cryptocurrency wallets, though the amount of cryptocurrency held in the wallets was not disclosed.

Notably, the Thai police operation was part of Operation Phobos Aetor, suggesting a connection between 8Base and the Phobos ransomware. In 2024, the IT administrator of the Phobos ransomware was extradited to the United States for trial, but the extent and nature of the relationship between Phobos and 8Base remain unclear.

As with most ransomware operations, it is suspected that 8Base may soon resurface. These groups often comprise multiple members scattered across the globe, and the arrest of some members does not necessarily impede the group’s operations.

The remaining members typically regroup under a new name and website, continuing their attacks on companies worldwide to extort ransom payments.

Related Posts:

• North Korean hackers use Thai servers for stealing data from 17 countries
• 55 Million Records: Thailand’s PII Massive Leak Unveiled
• Phobos Ransomware: A Masquerading Threat Impersonating VX-Underground
• Ransomware Groups Exploit Veeam Flaw CVE-2023-27532 in Nigerian Cyber Infrastructure
• Phobos Ransomware Administrator Extradited to US to Face Charges