MonsterCloud CEO Zohar Pinhasi Accused of Paying Hackers, Defrauding Victims
MonsterCloud CEO Zohar Pinhasi charged with defrauding victims by paying hackers and overcharging for recovery.
The CEO of ransomware recovery firm MonsterCloud, Zohar Pinhasi, has been charged by the US Department of Justice with wire fraud and conspiracy to commit wire fraud. Prosecutors allege that Pinhasi falsely claimed to use proprietary decryption technology while secretly paying ransomware attackers for decryption keys and then charging clients significantly inflated fees for the recovery services. The indictment details instances where Pinhasi paid attackers hundreds of thousands of dollars while billing clients millions.
AI summary of the linked source. Not reviewed by an editor. How this works
Run MonsterCloud?
Get an email when a new story names MonsterCloud, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonMonsterCloud's CEO allegedly exploited victims at their most vulnerable moment — immediately after a ransomware attack — by falsely claiming proprietary decryption capabilities while simply paying ransomware gangs and massively marking up the cost. This case exposes a critical blind spot: organizations in crisis often cannot verify the claims of third-party recovery vendors, creating fertile ground for fraud. It also highlights the dangerous reality that engaging with ransomware attackers, even indirectly through a vendor, carries legal, financial, and ethical risks. The incident underscores that the incident response supply chain itself is an attack surface that requires due diligence, transparency, and contractual accountability.