--- title: International Operation Takes Down 8base Ransomware Gang... description: An international law enforcement operation, 'Operation Phobos Aetor,' successfully targeted the 8Base ransomware group, leading to multiple arrests and the... canonical: https://daily.dev/posts/international-operation-takes-down-8base-ransomware-gang-leak-site-ynuwu1kmr twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: International Operation Takes Down 8base Ransomware Gang Leak Site | daily.dev og:description: An international law enforcement operation, 'Operation Phobos Aetor,' successfully targeted the 8Base ransomware group, leading to multiple arrests and the... og:url: https://daily.dev/posts/international-operation-takes-down-8base-ransomware-gang-leak-site-ynuwu1kmr og:image: https://api.daily.dev/og/posts/ynUWU1kMr.png og:image:alt: International Operation Takes Down 8base Ransomware Gang Leak Site og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # International Operation Takes Down 8base Ransomware Gang Leak Site **[Collections](https://daily.dev/sources/collections)** · 2 min read · 2 upvotes · 0 comments ## Summary An international law enforcement operation, 'Operation Phobos Aetor,' successfully targeted the 8Base ransomware group, leading to multiple arrests and the dismantling of its infrastructure. The group, responsible for over 1,000 ransomware attacks, primarily targeted sectors like finance, healthcare, and critical infrastructure in the US. Authorities seized over 100 servers and 40 pieces of critical evidence, warning over 400 companies worldwide and preventing numerous attacks. The operation highlights the ongoing need for vigilance against evolving ransomware threats. ## Content An international law enforcement operation has achieved significant success against the 8Base ransomware group, leading to the arrest of multiple suspects and the dismantling of their infrastructure. Investigators from Bavaria and law enforcement agencies from over a dozen countries collaborated in this operation, known as 'Operation Phobos Aetor.' This concerted effort resulted in the arrest of four individuals tied to the 8Base group, including Russian nationals and suspects apprehended in Thailand. The 8Base group, a major affiliate of the Phobos ransomware-as-a-service operation, was responsible for over 1,000 ransomware attacks, targeting sectors such as finance, healthcare, and critical infrastructure mainly in the United States. The group's modus operandi included infiltrating IT systems through phishing emails, encrypting data, and demanding ransom for its release. Authorities managed to take down over 100 servers used by the group for data leaks and ransom negotiations. Additionally, they seized 40 pieces of critical evidence, and the operation preemptively warned over 400 companies across 30 countries, preventing numerous imminent ransomware attacks. This intervention thwarted potential damages and saved these organizations from possibly significant financial and operational disruptions. First active since 2022, the 8Base ransomware group employed advanced malware to ensure persistent access to affected IT systems and has accumulated illicit gains amounting to $16 million from their victims. Despite the arrests and seizure of the group's leak sites on the dark web, the operation underscores the need for continuous vigilance given the evolving nature of ransomware threats, as cybercriminals continuously adapt and target more high-profile organizations with their rapid, large-scale attacks. ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/international-operation-takes-down-8base-ransomware-gang-leak-site-ynuwu1kmr) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"International Operation Takes Down 8base Ransomware Gang Leak Site","url":"https://daily.dev/posts/international-operation-takes-down-8base-ransomware-gang-leak-site-ynuwu1kmr","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/international-operation-takes-down-8base-ransomware-gang-leak-site-ynuwu1kmr"},"datePublished":"2025-02-10T22:20:13.994Z","dateModified":"2025-02-12T13:05:14.760Z","description":"An international law enforcement operation, 'Operation Phobos Aetor,' successfully targeted the 8Base ransomware group, leading to multiple arrests and the...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ae9077f136408ec4d48500e29cfdf6e0?_a=AQAEuj9","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ae9077f136408ec4d48500e29cfdf6e0?_a=AQAEuj9","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/international-operation-takes-down-8base-ransomware-gang-leak-site-ynuwu1kmr","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,ransomware","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"International Operation Takes Down 8base Ransomware Gang Leak Site"}]} ```