DOJ Accuses MonsterCloud CEO of Paying Hackers While Charging Victims
The Department of Justice accuses Zohar Pinhasi of secretly funding ransomware gangs for decryption keys while billing victims for recovery services.
Key points
- The DOJ accuses MonsterCloud CEO Zohar Pinhasi of paying ransomware groups for decryption keys.
- Pinhasi is accused of charging victims for these same recovery services simultaneously.
- The report comes from a summary provided by the news outlet Hackread.
The Department of Justice accuses MonsterCloud CEO Zohar Pinhasi of secretly paying ransomware gangs for decryption keys while charging victims for those services, according to a report by Hackread. The allegations center on Pinhasi’s alleged conduct while leading the data recovery firm.
The DOJ’s accusations describe a scheme where Pinhasi allegedly paid criminal groups to unlock encrypted data. According to the summary provided by Hackread, Pinhasi then billed the victims for these decryption efforts. The report indicates that Pinhasi is accused of defrauding victims through these dual transactions involving ransomware operators.
Background on the Allegations
The accusations rely on information reported by Hackread regarding the DOJ’s stance on Pinhasi. The outlet states that the DOJ accuses Pinhasi of engaging in secret payments to ransomware gangs. These payments were allegedly made in exchange for decryption keys that unlocked victim data.
Pinhasi is accused of leveraging his position as the CEO of MonsterCloud. The report highlights that he is alleged to have charged victims for the very services he allegedly funded through illicit payments. The DOJ’s position, as described by Hackread, frames this as a fraudulent activity against those seeking data recovery.
Who Is Affected
The victims targeted in this alleged scheme are individuals or organizations that engaged MonsterCloud for data recovery. According to the Hackread summary, these victims were charged by Pinhasi for decryption services. The DOJ accuses Pinhasi of defrauding these specific clients by involving ransomware gangs in the process.
The report does not specify the number of victims affected by these alleged actions. Hackread’s summary focuses on the nature of the accusation rather than the scope of the victim pool. The allegations imply that any client who paid for decryption during Pinhasi’s tenure could be affected.
What should you do?
Security professionals should monitor official channels for updates on this case from the Department of Justice. Organizations should verify the legitimacy of any data recovery vendor they engage with. Due diligence includes checking for any legal actions or accusations against service providers.
What to do and how to stay safe: MonsterCloud
- Verify the legal standing and reputation of any third-party data recovery vendor before engaging their services.
- Monitor official government announcements for updates on legal actions against alleged fraudsters in the cybersecurity sector.
- Review internal incident response plans to ensure they include verification steps for external recovery partners.
- Consult legal counsel if your organization has recently paid for data recovery services from firms under investigation.
Step-by-step guide: Social Engineering Warning Signs and How to Respond
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Who is the Department of Justice accusing in this case?
The DOJ is accusing Zohar Pinhasi, the CEO of MonsterCloud, of fraud and illegal payments to ransomware gangs.
What specific actions is Pinhasi accused of committing?
Pinhasi is accused of secretly paying ransomware gangs for decryption keys while simultaneously charging victims for those services.
What is the source of these allegations?
The allegations are reported by Hackread, which summarizes the Department of Justice’s accusations against Pinhasi.
