Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Phobos ransomware group arrested in Phobos ransomware suspect

Law Enforcement
First reported
Last updated
Happening score
H score 33
1 unique sources, 1 articles

Summary

Hide ▲

Polish police detained a 47-year-old man in Małopolska suspected of ties to Phobos ransomware, and seized devices holding stolen credentials and server access data. The arrest matters because the recovered material could support unauthorized access and further ransomware attacks. The action was carried out by CBZC with regional support and legal supervision from the District Prosecutor's Office in Gliwice. It also sits inside Operation Aether, a Europol-coordinated effort targeting Phobos infrastructure and affiliates.

Related Happenings

Peter Stokes extradited and charged in Scattered Spider cybercrime case

Law Enforcement
H score57 First: 02.07.2026 11:45 Last: 02.07.2026 11:45 Sources 1

About this happening: The US Justice Department arrested and extradited Peter Stokes in a cybercrime case, bringing an alleged Scattered Spider member into US custody for prosecution. H...

Open Happening

Europol-led AudiA6 crypto-laundering takedown

Law Enforcement
H score29 First: 11.06.2026 18:55 Last: 11.06.2026 18:55 Sources 1

About this happening: Law enforcement dismantled AudiA6, a cryptocurrency laundering service used by ransomware gangs and other cybercriminal networks, in a June 10, 2026 multinatio...

Open Happening

Dutch National Police arrest Ajax hack suspect

Law Enforcement
H score35 First: 27.05.2026 12:09 Last: 27.05.2026 12:09 Sources 1

About this happening: The Dutch National Police arrested a 35-year-old man from Buren in a computer trespassing case tied to Ajax Amsterdam (AFC Ajax), escalating a criminal probe into...

Open Happening

Guardia di Finanza dismantles CINEMAGOAL piracy network

Law Enforcement
H score20 First: 23.05.2026 17:23 Last: 23.05.2026 17:23 Sources 1

About this happening: Italian authorities seized CINEMAGOAL servers and dismantled a cross-border takedown of a piracy ecosystem that stole streaming authentication codes. The Tutto Chiar...

Open Happening

First VPN takedown by Europol and French-Dutch authorities

Law Enforcement
H score17 First: 21.05.2026 16:09 Last: 21.05.2026 16:09 Sources 1

About this happening: Europol and French and Dutch authorities took First VPN offline in a cross-border operation that also seized servers and arrested the administrator. The case m...

Open Happening

Timeline

  1. 17.02.2026 13:31 2 articles · 4mo ago

    CBZC detains Phobos ransomware suspect in Małopolska

    Initial Disclosure

    Poland's Central Bureau of Cybercrime Control (CBZC) detained a 47-year-old suspect in Małopolska, searched his residence, and seized computers and mobile phones containing credentials, passwords, credit card numbers, and server access data that could support unauthorized access and ransomware attacks. Investigators also linked the suspect to encrypted-messaging contact with the Phobos cybercrime organization, and the operation was supervised by the District Prosecutor's Office in Gliwice as part of Operation Aether.

    Show sources
    Open in new tab