Phobos has long been linked to the 8base data extortion gang, which also saw its dark web leak site seized as part of the operation.
The Justice Department on Wednesday unsealed charges against two of the suspects, named as Roman Berezhnoy, 33, and Egor Nikolaevich Glebov, 39, who stand accused of operating the 8base ransomware affiliate organization, which “victimized public and private entities through the deployment of Phobos ransomware.”
The FBI last year warned that Phobos had been used in attacks targeting local governments, emergency services, public healthcare, and other critical infrastructure entities across the United States.