Phobos Ransomware Operator Evgenii Ptitsyn Pleads Guilty in US

Summary
Evgenii Ptitsyn pleaded guilty to wire fraud conspiracy over his alleged role in the Phobos ransomware operation. Arrested in South Korea in 2024 and extradited to the US, he faces up to 20 years in prison.
Key points
- The US Justice Department announced that Ptitsyn pleaded guilty to wire fraud conspiracy; sentencing is scheduled for July 15.
- Authorities say Ptitsyn participated in the Phobos operation since at least November 2020, helping sell, distribute, and operate the ransomware.
- He was arrested in South Korea in June 2024 and extradited to the United States in November 2024.
- Authorities say the Phobos operation targeted more than 1,000 organizations worldwide; cybercriminals are believed to have received over $16 million in ransom payments.
- US and European authorities have announced infrastructure takedowns and arrests connected to Phobos.
Article Details
- Event Type
- Ransomware operator guilty plea
- Impact
- Evgenii Ptitsyn pleaded guilty to wire fraud conspiracy for his role in the Phobos ransomware operation and faces up to 20 years in prison; sentencing is scheduled for July 15. Authorities say Phobos targeted more than 1,000 organizations worldwide, and cybercriminals are believed to have obtained over $16 million in ransom payments.
Threat Actors
Evgenii PtitsynPleaded guilty to wire fraud conspiracy. According to authorities, he helped sell, distribute, and operate ransomware for the Phobos scheme since at least November 2020.PhobosRansomware operation that authorities say targeted more than 1,000 organizations worldwide. Cybercriminals are believed to have obtained over $16 million in ransom payments.
Malware
Countries
PolandPolice in Poland apprehended a 47-year-old man who appears to be suspected of being a Phobos affiliate.South KoreaThe man, Evgenii Ptitsyn, was arrested in South Korea in June 2024 and extradited to the United States in November of the same year.United StatesThe man, Evgenii Ptitsyn, was arrested in South Korea in June 2024 and extradited to the United States in November of the same year.
