17 Swiss companies

The 8Base ransomware gang, as part of Operation Phobos Aetor, executed a series of cyberattacks using the Phobos malware on 17 Swiss firms, leading to significant financial damage and data inaccessibility. Over $16 million in Bitcoins were stolen from around 1,000 international victims. The affected Swiss companies experienced encrypted networks, with data held ransom, disrupting their operations and financial stability. This widespread attack prompted an international law enforcement response resulting in arrests and the takedown of the gang's infrastructure.

Source: https://securityaffairs.com/174078/cyber-crime/police-dismantled-8base-ransomware-gang.html

TPRM report: https://scoringcyber.rankiteo.com/company/swissnex-san-francisco

"id": "swi000021425",
"linkid": "swissnex-san-francisco",
"type": "Ransomware",
"date": "2/2025",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"

{'affected_entities': [{'location': 'Switzerland', 'type': 'Firms'}],
 'attack_vector': 'Phobos malware',
 'data_breach': {'data_encryption': ['Encrypted networks']},
 'description': 'The 8Base ransomware gang, as part of Operation Phobos Aetor, '
                'executed a series of cyberattacks using the Phobos malware on '
                '17 Swiss firms, leading to significant financial damage and '
                'data inaccessibility. Over $16 million in Bitcoins were '
                'stolen from around 1,000 international victims. The affected '
                'Swiss companies experienced encrypted networks, with data '
                'held ransom, disrupting their operations and financial '
                'stability. This widespread attack prompted an international '
                'law enforcement response resulting in arrests and the '
                "takedown of the gang's infrastructure.",
 'impact': {'data_compromised': ['Data held ransom'],
            'downtime': ['Disruption of operations'],
            'financial_loss': ['Over $16 million in Bitcoins stolen'],
            'operational_impact': ['Disruption of financial stability'],
            'systems_affected': ['Encrypted networks']},
 'motivation': 'Financial gain',
 'ransomware': {'data_encryption': ['Encrypted networks'],
                'ransomware_strain': 'Phobos'},
 'response': {'containment_measures': ["Arrests and takedown of the gang's "
                                       'infrastructure'],
              'law_enforcement_notified': ['International law enforcement '
                                           'response']},
 'threat_actor': '8Base ransomware gang',
 'title': '8Base Ransomware Attack on Swiss Firms',
 'type': 'Ransomware'}