Ransomware attacks: international search on the trail of 8Base

Ransomware attacks: international search on the trail of 8Base

In the fight against international cybercrime, the Cybercrime Bayern (ZCB) and the Bavarian State Criminal Police Office (BlKA) confiscated 17 servers in Germany together with the FBI in August. These actions aim to smash the criminal organization "8BASE", which uses the "Phobos" brand worldwide. In Germany, 365 attacks by “Phobos” were registered, whereby at least 30 cases can be assigned to this group.

In a further blow, the investigators managed to arrest four leading members of "8Base" in Thailand. These measures were carried out in close cooperation with the FBI, the Swiss federal prosecutor and other international authorities. In addition, the BlKA warned around 240 companies from 30 countries of possible encryption from the ransomware, including numerous companies from the USA, France, Japan and Germany. Already on Sunday, February 9th, 2025, the IT infrastructure of the "8Base" group was confiscated by the BlKA, a total of 115 servers were removed from the network by order from the Bamberg District Court. The operation impressively shows how vehemently the international security authorities act against modern cyber threats.