Phobos ransomware group arrested in Phobos ransomware suspect
Law Enforcement
Summary
Hide ▲
Show ▼
Polish police detained a 47-year-old man in Małopolska suspected of ties to Phobos ransomware, and seized devices holding stolen credentials and server access data. The arrest matters because the recovered material could support unauthorized access and further ransomware attacks. The action was carried out by CBZC with regional support and legal supervision from the District Prosecutor's Office in Gliwice. It also sits inside Operation Aether, a Europol-coordinated effort targeting Phobos infrastructure and affiliates.
Related Happenings
Peter Stokes extradited and charged in Scattered Spider cybercrime case
Law Enforcement
H score44
First: 02.07.2026 11:45
Last: 02.07.2026 11:45
Sources 1
About this happening:
The **US Justice Department** arrested and extradited **Peter Stokes** in a **cybercrime** case, bringing an alleged **Scattered Spider** member into US custody for prosecution. H...
Peter Stokes extradited and charged in Scattered Spider cybercrime case
Law EnforcementAbout this happening: The **US Justice Department** arrested and extradited **Peter Stokes** in a **cybercrime** case, bringing an alleged **Scattered Spider** member into US custody for prosecution. H...
Europol-led AudiA6 crypto-laundering takedown
Law Enforcement
H score29
First: 11.06.2026 18:55
Last: 11.06.2026 18:55
Sources 1
About this happening:
**Law enforcement** dismantled **AudiA6**, a **cryptocurrency laundering service** used by **ransomware gangs** and other cybercriminal networks, in a **June 10, 2026** multinatio...
Europol-led AudiA6 crypto-laundering takedown
Law EnforcementAbout this happening: **Law enforcement** dismantled **AudiA6**, a **cryptocurrency laundering service** used by **ransomware gangs** and other cybercriminal networks, in a **June 10, 2026** multinatio...
Dutch National Police arrest Ajax hack suspect
Law Enforcement
H score35
First: 27.05.2026 12:09
Last: 27.05.2026 12:09
Sources 1
About this happening:
The **Dutch National Police** arrested a **35-year-old man from Buren** in a **computer trespassing** case tied to **Ajax Amsterdam (AFC Ajax)**, escalating a criminal probe into...
Dutch National Police arrest Ajax hack suspect
Law EnforcementAbout this happening: The **Dutch National Police** arrested a **35-year-old man from Buren** in a **computer trespassing** case tied to **Ajax Amsterdam (AFC Ajax)**, escalating a criminal probe into...
Guardia di Finanza dismantles CINEMAGOAL piracy network
Law Enforcement
H score20
First: 23.05.2026 17:23
Last: 23.05.2026 17:23
Sources 1
About this happening:
Italian authorities **seized** **CINEMAGOAL** servers and dismantled a cross-border **takedown** of a piracy ecosystem that stole streaming authentication codes. The **Tutto Chiar...
Guardia di Finanza dismantles CINEMAGOAL piracy network
Law EnforcementAbout this happening: Italian authorities **seized** **CINEMAGOAL** servers and dismantled a cross-border **takedown** of a piracy ecosystem that stole streaming authentication codes. The **Tutto Chiar...
First VPN takedown by Europol and French-Dutch authorities
Law Enforcement
H score17
First: 21.05.2026 16:09
Last: 21.05.2026 16:09
Sources 1
About this happening:
**Europol** and **French and Dutch authorities** took **First VPN** offline in a cross-border operation that also **seized servers** and **arrested the administrator**. The case m...
First VPN takedown by Europol and French-Dutch authorities
Law EnforcementAbout this happening: **Europol** and **French and Dutch authorities** took **First VPN** offline in a cross-border operation that also **seized servers** and **arrested the administrator**. The case m...
Timeline
-
17.02.2026 13:31 2 articles · 4mo ago
CBZC detains Phobos ransomware suspect in Małopolska
Initial DisclosurePoland's Central Bureau of Cybercrime Control (CBZC) detained a 47-year-old suspect in Małopolska, searched his residence, and seized computers and mobile phones containing credentials, passwords, credit card numbers, and server access data that could support unauthorized access and ransomware attacks. Investigators also linked the suspect to encrypted-messaging contact with the Phobos cybercrime organization, and the operation was supervised by the District Prosecutor's Office in Gliwice as part of Operation Aether.
Show sources
- Poland arrests suspect linked to Phobos ransomware operation — www.bleepingcomputer.com — 17.02.2026 13:31
- Poland arrests suspect linked to Phobos ransomware operation — www.bleepingcomputer.com — 17.02.2026 13:31