Image by DC Studio, from Freepik
8Base Ransomware Crew Busted In International Operation, $16 Million Stolen
Reading time: 2 min
Posted on Feb 11, 2025
-
![Kiara Fabbri]()
-
![Justyn Newman]()
Fact-Checked by Justyn Newman Lead Cybersecurity Editor
Law enforcement agencies from the US, Europe, and Asia have dismantled the dark web operations of the 8Base ransomware group and arrested four suspects in Thailand, as first reported by a local news outlet.
In a Rush? Here are the Quick Facts!
- Over 1,000 victims targeted by 8Base since its launch in 2022.
- Evidence seized includes phones, cryptocurrency wallets, and laptops in coordinated raids.
- US and Swiss authorities seek extradition for conspiracy and wire fraud charges.
The gang, active since 2022, is accused of stealing $16 million from over 1,000 victims worldwide.The coordinated raids, part of “Operation Phobos Aetor,” targeted the group’s dark web portal, which was seized by Bavarian police, as reported by The Register.
Thai authorities arrested four European nationals in Phuket, seizing over 40 pieces of evidence, including phones, cryptocurrency wallets, and laptops. Swiss and US officials have requested the suspects’ extradition on charges of conspiracy to commit wire fraud and offenses against the United States.
Europol and the UK’s National Crime Agency (NCA) confirmed their involvement in the operation, with Europol set to release further details. The FBI and Bavarian police have yet to comment, said The Register.
8Base, which launched its leak site in May 2023, quickly became one of the top ransomware operators of the year. The group claimed to have targeted major organizations, including German carmaker Volkswagen, though the company downplayed the impact of the attack, as reported by The Register.
Security researchers are now monitoring for signs of 8Base re-emerging under a new alias. Some speculated the shutdown could be an exit scam, similar to the ALPHV ransomware group’s alleged tactic last year.
However, police involvement makes this scenario unlikely.The Register says that the takedown marks a significant victory in the fight against ransomware, though experts warn that such groups often rebrand and resume operations.
Latest articles 
Leave a Comment
Cancel