Phuket Police Capture Russian Hackers in $16 Million Ransomware Scheme Targeting Swiss Firms

Four Russian Hackers Arrested in Phuket for Ransomware Attacks on Swiss Companies

Phuket, Thailand – Law enforcement authorities in Phuket have successfully apprehended four individuals suspected of conducting a series of ransomware attacks targeting Swiss firms. According to a report from local media outlet The Nation Thailand dated February 10, the suspects, all of whom are Russian nationals, are believed to have deployed ransomware on the networks of at least 17 companies in Switzerland between April 2023 and October 2024.

Details of the Ransomware Scheme

Ransomware attacks typically involve cybercriminals encrypting a victim’s data and demanding a payment, often in cryptocurrency, for the decryption key. In this case, the reported malware used by the hackers is known as Phobos. The group behind these attacks, identified as the Russian ransomware organization 8Base, is also alleged to have stolen approximately $16 million worth of Bitcoin from around 1,000 victims across the globe.

Pol Lt Gen Trairong Phiewphan, the commissioner of the Cyber Crime Investigation Bureau, confirmed that the suspects were on the radar of both U.S. and Swiss authorities, emphasizing the international dimension of their criminal activities.

Coordination and Arrest

The arrests were made possible through a collaborative effort between Thai police and immigration officials. Authorities managed to track down the suspects in Phuket, where they seized over 40 items of evidence, including laptops, smartphones, and digital wallets that may contain further incriminating materials.

Swiss authorities have already initiated extradition requests to bring the suspects to Switzerland to stand trial for their alleged crimes.

Rising Cryptocurrency Crimes in Phuket

This operation is part of a larger trend of increasing cryptocurrency-related crimes in Phuket. The island has recently seen a surge in such illicit activities. In a disturbing incident last month, a Russian individual was assaulted and robbed of $20,000 in a hotel located in Karon, Phuket. Reports suggest that this violent act stemmed from a dispute over an unsettled cryptocurrency debt between the victim and two Russian associates.

Additionally, in November 2024, a Ukrainian national visiting Phuket was coerced into transferring $250,000 worth of Tether, another cryptocurrency. Reports indicate that the victim was tied up with cables by his assailants, who forced him to conduct the transaction before fleeing the scene.

As law enforcement continues to crack down on these criminal activities, the arrest of the four ransomware hackers underscores the critical importance of international cooperation in combating cybercrime and protecting vulnerable businesses from such sophisticated and damaging attacks.