Phobos
MalwareBytes states that Phobos is one of the ransomware families that are distributed via hacked Remote Desktop (RDP) connections. This isn't surprising, as hacked RDP servers are a cheap commodity on the underground market, and can make for an attractive and cost efficient dissemination vector for threat groups.
Last 7 days
| Date | C2 Hosts |
|---|---|
| Mar 30, 2026 | 1 |
Further Reading
In April 2024, S-RM’s Cyber Threat Intelligence team identified a Faust operator, an affiliate of the Phobos Ransomware-as-a-service group, utilising a new leak site, titled ‘Space Bears’, to extor...
SRI, în cooperare cu CERT-RO și Spitalul Clinic Nr.1 CF Witting din București, a investigat un atac cibernetic cu aplicația ransomware PHOBOS care a vizat serverele entității din domeniul sănătății.
On November 18th, the US Justice Department unsealed criminal charges against a Russian national for allegedly administering the sale, distribution, and operation of Phobos ransomware. Phobos is co...