Phobos is a Windows ransomware family historically observed encrypting files on infected hosts and demanding ransom payments.
Overview
Phobos is a Windows ransomware family historically observed encrypting files on infected hosts and demanding ransom payments. While the provided article centers on Makop ransomware exploiting exposed RDP and AV-killer techniques, it does not describe Phobos-specific activity; nonetheless, Phobos remains notable due to its long-standing presence in enterprise-targeted campaigns and its use of post-compromise encryption and extortion-like tactics.
Related Threat Clusters
-
Russian Ransomware Operator Evgenii Ptitsyn Pleads Guilty to Wire Fraud
Evgenii Ptitsyn, a Russian national, pleaded guilty to a wire fraud conspiracy charge related to his role in administering the Phobos ransomware operation. This ransomware has impacted hundreds of victims globally and…
11 articles · Updated March 4, 2026 -
WantToCry Ransomware Campaign Targets Exposed SMB Services for Remote Encryption
The WantToCry ransomware campaign exploits exposed Server Message Block (SMB) services to remotely encrypt files without deploying malware on victim systems. Attackers scan for open SMB ports and use brute-force methods…
6 articles · Updated May 20, 2026 -
Makop Ransomware Targets RDP Systems with Advanced Exploits
Makop ransomware, part of the Phobos malware family, is actively exploiting RDP systems. Attackers are utilizing brute-force methods alongside privilege escalation techniques and security bypass tools, affecting a…
3 articles · Updated December 9, 2025 -
Poland Arrests Suspect Linked to Phobos Ransomware Operation
Polish police have arrested a 47-year-old man suspected of involvement with the Phobos ransomware group. The suspect was detained in the Małopolska region, and law enforcement seized computers and mobile devices…
9 articles · Updated February 17, 2026 -
Podcast Discusses Cybersecurity Trends and Ethical Hacking
A podcast released on February 1, 2026, covers various aspects of cybersecurity, including ethical hacking. The discussion emphasizes the importance of understanding cookie usage and data privacy in the context of…
1158 articles · Updated February 1, 2026 -
Israel's Cyber Operation Targets Iranian Supreme Leader Khamenei
Israel conducted a cyber operation to hack Tehran's traffic cameras, allowing them to monitor the movements of Iran's supreme leader, Ali Khamenei, and his bodyguards. This intelligence gathering was part of a broader…
69 articles · Updated March 2, 2026 -
Emergence of Agentic AI Raises Governance and Security Challenges
In 2026, the rise of agentic AI is transforming how businesses operate, particularly in the financial services sector. This new technology allows for autonomous decision-making, which increases the potential impact of…
4262 articles · Updated February 10, 2026
Recent Intelligence Reports
- PCrisk guide — www.pcrisk.com · May 20, 2026
- Risky Bulletin: Iranian hackers are scanning for security cameras to aid missile strikes — News.Risky.Biz · March 6, 2026
- Phobos Ransomware admin faces up to 20 years after guilty plea — Securityaffairs.Co · March 5, 2026
- Phobos ransomware leader facing 20 years in prison after pleading guilty to hacking charges — Therecord.Media · March 5, 2026
- Phobos ransomware leader pleads guilty, faces up to 20 years in prison — Cyberscoop · March 5, 2026
- Russian Phobos Ransomware Administrator Pleads Guilty to Wire Fraud Conspiracy — Technadu · March 5, 2026
- Russian Ransomware Operator Pleads Guilty in US — Securityweek · March 5, 2026
- Phobos ransomware admin pleads guilty to wire fraud conspiracy — Bleepingcomputer · March 5, 2026