This episode delves into the8Base ransomware group, which emerged in 2022 and rapidly became a major cyber threat. By 2023, they were using amulti-extortion model, encrypting data and threatening to leak it on a dark web blog. Linked to the Phobos ransomware family, they attacked over1,000 victims worldwide, amassing an estimated$16 million. Victims spanned various sectors, with a significant number in the US and Brazil. High profile attacks include the one against the Nidec Corporation where over 50,000 files were stolen.

Operation Phobos Aetor, an international law enforcement effort involving agencies like the FBI and Europol, led to theseizure of 8Base’s dark web infrastructure and thearrest of four suspects in Thailand. Over 40 pieces of evidence were seized, including phones and laptops. The group used a modified version of Phobos ransomware, and had links with other groups like RansomHouse. Ransomware attacks are a major threat, with victims paying over $800 million in 2024.

https://hackread.com/police-dismantle-8base-ransomware-seize-dark-web-sites/

https://www.techradar.com/pro/security/8base-ransomware-site-taken-down-in-global-police-operation

https://thehackernews.com/2025/02/8base-ransomware-data-leak-sites-seized.html

This podcast is based on information from multiple sources and is created using a Google Gemini model.