Phobos Ransomware Administrator Extradited to US to Face Charges

Evgenii Ptitsyn - Phobos ransomware
Image: vx-underground

Evgenii Ptitsyn, a Russian national, faces a 13-count indictment for his alleged role in a global ransomware scheme that extorted millions from over 1,000 victims.

In a significant victory for international cybersecurity cooperation, the U.S. Department of Justice has successfully extradited Evgenii Ptitsyn from South Korea to face charges related to the Phobos ransomware. Ptitsyn is accused of administering the sale, distribution, and operation of the ransomware, which has impacted over 1,000 public and private entities worldwide.

The Justice Department is committed to leveraging the full range of our international partnerships to combat the threats posed by ransomware like Phobos,” said Deputy Attorney General Lisa Monaco.

Phobos ransomware has been used to target a wide range of organizations, including schools, hospitals, nonprofits, and government agencies. The ransomware encrypts victims’ data, rendering it inaccessible until a ransom is paid.

Ptitsyn and his co-conspirators hacked not only large corporations but also schools, hospitals, nonprofits, and a federally recognized tribe, and they extorted more than $16 million in ransom payments,” said Principal Deputy Assistant Attorney General Nicole M. Argentieri.

Ptitsyn’s arrest and extradition were the result of a coordinated effort between law enforcement agencies in multiple countries, including South Korea, the United Kingdom, Japan, and several European nations.

It’s only a matter of time, cybercriminals will be caught and brought to justice,” said U.S. Attorney Erek L. Barron for the District of Maryland.

Ptitsyn faces a 13-count indictment, including charges of wire fraud, conspiracy to commit computer fraud and abuse, and extortion. If convicted, he could face a maximum penalty of 20 years in prison for each wire fraud count.

Related Posts: