International agency release # Key figures behind Phobos and 8Base ransomware arrested in international cybercrime crackdown Europol, February 11, 2025. Establishes the disruption of more than 100 servers connected to Phobos/8Base.. **Source type:** International agency release **Published:** February 11, 2025 **Research grade:** P2 **Used in entries:** 4 ## Bibliographic record **Publisher:** Europol **Published:** February 11, 2025 **Source type:** International agency release **Research grade:** Source grade P2 **Language:** English **Official record:** Official publication **Address:** [https://www.europol.europa.eu/media-press/newsroom/news/key-figures-behind-phobos-and-8base-ransomware-arrested-in-international-cybercrime-crackdown](https://www.europol.europa.eu/media-press/newsroom/news/key-figures-behind-phobos-and-8base-ransomware-arrested-in-international-cybercrime-crackdown) **What it supports:** Establishes the disruption of more than 100 servers connected to Phobos/8Base. **Dataset id:** src\_europol\_phobos\_2025 How this source is used Cited 4 times across 3 record types. The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards. Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here. ## Cited by ### Takedown records 1 citation Cited on the takedown record itself. - [Phobos/8Base ransomware disruption](https://takedownindex.org/takedowns/phobos-8base-ransomware-disruption) Ransomware, February 2025 Primary source ### Organization roles 1 citation Cited for an organization's recorded role in a takedown. - [European Union Agency for Law Enforcement Cooperation](https://takedownindex.org/takedowns/phobos-8base-ransomware-disruption) Coordinator, Phobos/8Base ransomware disruption Primary source ### Infrastructure 2 citations Cited for infrastructure recorded as acted on. - [more than 100 servers](https://takedownindex.org/takedowns/phobos-8base-ransomware-disruption) Servers disabled, Phobos/8Base ransomware disruption Primary source - [8Base data leak and negotiation site](https://takedownindex.org/takedowns/phobos-8base-ransomware-disruption) Onion service seized, Phobos/8Base ransomware disruption Primary source [All sources](https://takedownindex.org/sources)