#8Base
This is what Trump's Axis of Evil pals let their military hackers do as a wide hustle: killing western hospital patients for ransom.

No wonder Trump loves Putin like an Elon.
Russian Hackers Extorted Millions From Children’s Hospitals and Schools Worldwide
Roman Berezhnoy and Egor Glebov's 8Base ransomware extorted millions from victims such as children's hospitals. What is 8Base, and how does it work?
united24media.com
February 26, 2025 at 11:23 AM
Russian hackers stole millions from kids' hospitals and schools.

How did they work, and what does their fall reveal about Russia’s cybercrime?
Russian Hackers Extorted Millions From Children’s Hospitals and Schools Worldwide
Roman Berezhnoy and Egor Glebov's 8Base ransomware extorted millions from victims such as children's hospitals. What is 8Base, and how does it work?
united24media.com
February 25, 2025 at 4:02 PM
Global police operation seizes 8base ransomware gang leak site
Global police operation seizes 8base ransomware gang leak site
The U.S. government previously said 8base indiscriminately targeted multiple sectors across the United States, including healthcare © 2024 TechCrunch. All rights reserved. For personal use only.
tcrn.ch
February 10, 2025 at 4:20 PM
> go online
> check new doj press release on 8base
> says 8base attacked children's hospital
> says 8base is facing 130 YEARS IN PRISON

Holy cannoli. Feds are NOT playing fam
February 11, 2025 at 9:16 PM
UNITED24 Media Telegram Highlights THread

Russian Hackers Extorted Millions From Children’s Hospitals and Schools Worldwide
Russian nationals behind the hacker group "8Base,” extorted millions of dollars from victims—including children's hospitals >>
Russian Hackers Extorted Millions From Children’s Hospitals and Schools Worldwide
Roman Berezhnoy and Egor Glebov's 8Base ransomware extorted millions from victims such as children's hospitals. What is 8Base, and how does it work?
united24media.com
February 26, 2025 at 8:58 AM
Authorities arrest four suspected 8base ransomware operators in global takedown 
Authorities arrest four suspected 8base ransomware operators in global takedown 
The Russian nationals are accused of launching more than 1,000 ransomware attacks worldwide to steal $16 million © 2024 TechCrunch. All rights reserved. For personal use only.
tcrn.ch
February 11, 2025 at 1:39 PM
German authorities have seized the dark web leak site of the 8base ransomware and extortion crew. U.K. says it played a role in the takedown operation, per @carlypage.bsky.social, but that we'll likely hear more in the next 24 hours.

techcrunch.com/2025/02/10/g...
Global police operation seizes 8base ransomware gang leak site | TechCrunch
The U.S. government previously said 8base indiscriminately targeted multiple sectors across the United States, including healthcare
techcrunch.com
February 10, 2025 at 4:23 PM
警察庁がランサムウェア「Phobos」「8Base」による暗号化を解除するツールを開発、使い方はこんな感じ
https://gigazine.net/news/20250718-national-police-agency-phobos/
警察庁がランサムウェア「Phobos」「8Base」による暗号化を解除するツールを開発、使い方はこんな感じ
PC内のファイルを暗号化して身代金を要求する犯罪で用いられる「ランサムウェア」のうち、「Phobos」「8Base」による暗号化を解除してファイルを復号するツールを警察庁が開発しました。
gigazine.net
July 18, 2025 at 3:26 AM
All your 8Base are belong to us: Ransomware crew busted in global sting
All your 8Base are belong to us: Ransomware crew busted in global sting
Dark web site seized, four cuffed in Thailand An international police operation spanning the US, Europe, and Asia has shuttered the 8Base ransomware crew's dark web presence and resulted in the arrest of four European suspects accused of stealing $16…
dlvr.it
February 10, 2025 at 10:19 PM
Thai authorities detain four Europeans in ransomware crackdown -- the multi-national law enforcement operation targeted the 8base ransomware gang cyberscoop.com/8base-ransom...
Thai authorities detain four Europeans in ransomware crackdown
A multi-national law enforcement operation targeted the 8base ransomware gang, with Thai police arrested two men and two women.
cyberscoop.com
February 10, 2025 at 8:34 PM
Four members of Russian hacker group 8Base arrested in international cybercrime crackdown

All the detainees are Russian nationals and are suspected of deploying the Phobos ransomware to extort large sums from victims across Europe and other countries.
Four members of Russian hacker group 8Base arrested in international cybercrime crackdown
Four key members of the Russian hacker group 8Base, one of the most active ransomware gangs of 2024, have been arrested in a joint international operation supported by Europol and Eurojust. According ...
theins.press
February 12, 2025 at 6:23 PM
I have a confession: whenever I hear 8Base I think of Ace of Base and “I Saw the Sign” - which I am pretty sure is a song about threat hunting.

Anyway, congratulations to LE on another great takedown.

via @alexmartin.bsky.social & @therecordmedia.bsky.social
8Base ransomware site taken down as Thai authorities arrest 4 connected to operation
The leak site for the 8Base ransomware gang was taken down Monday and replaced with a banner by multiple law enforcement agencies.
therecord.media
February 10, 2025 at 9:31 PM
Europol annonce l’arrestation de cyberpirates russes impliqués dans un réseau de rançongiciels
Europol annonce l’arrestation de cyberpirates russes impliqués dans un réseau de rançongiciels
Les quatre ressortissants russes arrêtés dans le cadre d’une opération internationale contre la cybercriminalité sont des figures-clés de 8Base, l’un des groupes de rançongiciels les plus actifs en 2024.
www.lemonde.fr
February 11, 2025 at 7:33 PM
-SMS blasting incidents are rising
-Iranian security firm behind APT39
-Chinese hackers breach Singapore critical infra
-new SharePoint and CrushFTP zero-days
-Japan releases free decrypters for Phobos and 8base ransomware

Newsletter: news.risky.biz/risky-bullet...
Podcast: risky.biz/RBNEWS454/
July 21, 2025 at 9:16 AM
🚨 8Base Ransomware Takedown! International authorities seize 4 dark web sites and arrest 4 suspects tied to the notorious #8Base ransomware group.

🔗 hackread.com/police-disma...

#CyberSecurity #Ransomware #DarkWeb #CyberCrime
4 Arrested as Police Dismantle 8Base Ransomware, Seize Dark Web Sites
Follow us on Bluesky, Twitter (X) and Facebook at @Hackread
hackread.com
February 10, 2025 at 7:22 PM
👉 ASCOM S.P.A. was allegedly breached by threat actor #8base on January 7, 2025.

Check the records here: ransomnews.github.io/RedACT/?q=as....
August 14, 2026 at 5:29 AM
Is this the same Phobos? medium.com/@Intel_Ops/p...
Phobos Ransomware: Analysing associated infrastructure used by 8Base
On February 29th 2024, CISA released an advisory on Phobos ransomware.
medium.com
November 18, 2024 at 8:26 PM
Great news that Japanese police have put together a free decryptor for the Phobos ransomware (helped no doubt by arrested of suspected members of the gang, and the seizure of its infrastructure)

www.fortra.com/blog/free-de...
Free decryptor for victims of Phobos ransomware released
Police have released a free decryptor capable of recovering files encrypted by both the notorious Phobos ransomware, and its offshoot 8Base.
www.fortra.com
July 24, 2025 at 4:48 PM
A group of international law enforcement agencies have seized the dark web leak site of the 8base ransomware gang.

The NCA confirmed the legitimacy of the takedown message to TechCrunch and said the UK played a “supportive role” in the operation techcrunch.com/2025/02/10/g...
Global police operation seizes 8base ransomware gang leak site | TechCrunch
The U.S. government previously said 8base indiscriminately targeted multiple sectors across the United States, including healthcare
techcrunch.com
February 10, 2025 at 4:19 PM
Great job by police organisations around the globe to seize domains and arrest #ransomware operators of Phobos/#8BASE.

www.khaosodenglish.com/news/2025/02...
February 10, 2025 at 2:07 PM
8Base ransomware group hacked Croatia’s Port of Rijeka
8Base ransomware group hacked Croatia's Port of Rijeka
The 8Base ransomware group attacked Croatia's Port of Rijeka, stealing sensitive data, including contracts and accounting info.
securityaffairs.com
December 7, 2024 at 8:17 PM
Glad to see LE and Gov keeping up the pressure on ransomware gangs in early 2025

ZSERVERS BPH sanctioned by the UK for enabling LockBit attacks
www.gov.uk/government/n...

Phobos & 8BASE arrests by international partners
www.europol.europa.eu/media-press/...
Key figures behind Phobos and 8Base ransomware arrested in international cybercrime crackdown | Europol
A coordinated international law enforcement action has led to the arrest of four individuals leading the 8Base ransomware group. These individuals, all Russian nationals, are suspected of deploying a ...
www.europol.europa.eu
February 11, 2025 at 3:56 PM
Internationale Polizeiaktion zerschlägt #Leak-Seite der #8base #Ransomware Gruppe

In einer koordinierten internationalen Aktion haben Strafverfolgungsbehörden die Leak-Seite der 8base-Ransomware-Gruppe im Darknet beschlagnahmt.

www.it-boltwise.de/internationa...
Internationale Polizeiaktion zerschlägt Leak-Seite der 8base-Ransomware-Gruppe
Internationale Strafverfolgungsbehörden haben die Leak-Seite der 8base-Ransomware-Gruppe im Darknet beschlagnahmt, ein bedeutender Schritt im Kampf gegen Cyberkriminalität.
www.it-boltwise.de
February 10, 2025 at 7:51 PM
[警察庁:ランサムウェアPhobos/8Baseにより暗号化されたファイルの復号ツールの利用について]

復号ツールのご利用にあたっては、リンク先のガイドラインを必ず確認してください

www.npa.go.jp/bureau/cyber...
ランサムウェアPhobos/8Baseにより暗号化されたファイルの復号ツールの利用について|警察庁Webサイト
www.npa.go.jp
September 11, 2026 at 11:46 PM