Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions
Ransomware recovery CEO indicted for defrauding clients and pocketing millions.
Zohar Pinhasi, owner of MonsterCloud, has been indicted for allegedly defrauding hundreds of clients who were victims of ransomware attacks. He claimed to have proprietary tools for data recovery but instead secretly paid cybercriminals, charging clients inflated fees. Over five years, Pinhasi allegedly collected over $19 million and paid out more than $8 million in ransoms.
AI summary of the linked source. Not reviewed by an editor. How this works
Run MonsterCloud?
Get an email when a new story names MonsterCloud, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonMonsterCloud's CEO allegedly exploited ransomware victims at their most vulnerable moment, posing as a legitimate recovery firm while secretly paying ransoms and pocketing the difference. This case exposes a critical blind spot: organizations under attack often lack the expertise to verify vendor claims or audit remediation activities. The fraud persisted for five years across hundreds of clients, illustrating how crisis conditions can suppress normal due diligence. This matters because victims not only suffered financial harm but may have inadvertently funded criminal ransomware operations, potentially violating OFAC sanctions regulations. Trust in third-party incident responders must be earned through transparency and verifiable credentials, not just marketing claims.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — MonsterCloud