Particle.news

Poland Arrests Suspect Tied to Phobos Ransomware Under Operation Aether

The case reflects an ongoing Europol-coordinated push to degrade Phobos’s affiliate-driven operation.

Overview

  • Poland’s Central Bureau of Cybercrime Control detained a 47-year-old in the Małopolska region in a coordinated action with units from Katowice and Kielce.
  • Investigators working under the Gliwice prosecutor found hacking tools plus files with passwords, payment card numbers, and server IP addresses.
  • Authorities say the suspect used encrypted messengers to communicate with the Phobos ransomware organization.
  • Prosecutors charged him under Article 269b for producing, acquiring, or distributing hacking tools, a crime punishable by up to five years in prison.
  • The arrest is part of Operation Aether, which has produced server seizures, Phuket affiliate arrests, and a 2024 extradition as authorities target a RaaS linked to more than 1,000 victims and over $16 million in ransoms.