Close Menu
NCIJ Network NCIJ Network
    What's Hot

    ChatGPT is getting a lot more visual, with the launch of a new interface

    October 8, 2026

    TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws

    October 8, 2026

    BitMine’s Ethereum buying spree could end in six weeks

    October 8, 2026
    Facebook X (Twitter) Instagram
    Trending
    • ChatGPT is getting a lot more visual, with the launch of a new interface
    • TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws
    • BitMine’s Ethereum buying spree could end in six weeks
    • Maryland Demands Answers as Fuel Leak Persists From Joint Base Andrews
    • SpaceX Used Tourist Video to Track Explosion Debris, Report Shows — ProPublica
    • Middle Powers’ Leverage in the AI Race
    • How much does France spend on education compared with the rest of Europe? | Education News
    • Far-right surge threatens Europe’s drive to rearm – POLITICO
    • About
      • Our Team
      • Editorial Policy
      • Editorial Independence
      • International Support
    • Trust & Standards
      • AI Usage Policy
      • Conflict of Interest Policy
      • Corrections Policy
      • Ethics Policy
      • Fact-Checking Policy
      • Source Protection
    • Get Involved
      • Guide for Sources
      • Support Independent Journalism
    • Legal
      • Cookie Policy
      • Privacy Policy
      • Terms of Use
    Facebook X (Twitter) Instagram
    NCIJ Network NCIJ Network
    Thursday, October 8
    • Home
    • World
    • Ai
    • Business
    • Politics
    • Health
    • Crypto
    • Science
    • Technology
    • Cybersecurity
    • Defense & Security
    • Economy
    • Energy
    • Europe
    • More
      • Fact Check
      • Investigations
      • Opinion & Analysis
      • Environment
    NCIJ Network NCIJ Network
    Home»Cybersecurity

    Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme

    NCIJ NETWNCIJ NETWORKBy NCIJ NETWNCIJ NETWORKOctober 8, 2026 Cybersecurity No Comments2 Mins Read
    Share
    Facebook Twitter LinkedIn Pinterest Email

    The owner of a US company was charged with defrauding clients through a ransomware remediation scheme.

    Zohar Pinhasi, 50, the owner of MonsterCloud, a US and Israeli national also known as ‘Zack Silver’ and ‘Zack Green’, appeared in a New York court to face wire fraud charges.

    According to the indictment, Pinhasi claimed that MonsterCloud could help organizations that fell victim to ransomware to recover their data without paying the attackers.

    While cautioning ransomware victims not to pay the attackers, Pinhasi allegedly falsely claimed his company could decrypt ransomware.

    Pinhasi allegedly claimed that MonsterCloud was using proprietary tools and advanced decryption techniques to recover encrypted data without paying the attackers.

    Instead, he contacted the ransomware groups that hacked his clients, paid ransoms to obtain the decryption keys, and then charged the victim organizations a fee when using the decryption key to restore the data.

    Advertisement. Scroll to continue reading.

    In one instance, he made a ransom payment of approximately $8,200 to a ransomware affiliate, and then charged the client approximately $150,000.

    Throughout the scheme, he allegedly paid over $8 million in ransoms and charged his clients over $19 million.

    Pinhasi was charged with wire fraud and wire fraud conspiracy and could be sentenced to tens of years in prison.

    “The defendant is charged with offering an alternative to ransom payments, but instead is alleged to have victimized the victim again and committed additional fraud, harming the victim again,” Assistant Attorney General A. Tysen Duva said.

    Related: Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany

    Related: FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware

    Related: Alleged ShinyHunters Leader Arrested in Jordan

    Related: Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon

    11M Decryption Fake Markup Masked ransomware recovery scheme Tools
    NCIJ NETWNCIJ NETWORK
    • Website

    Keep Reading

    TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws

    We are fighting phishing at the wrong layer

    FortiBleed Attackers Locking Victims Out of Fortinet Devices

    Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

    Hackers hijack Google domains after breaching ccTLD registries

    FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

    Add A Comment
    Leave A Reply Cancel Reply

    Editors Picks

    ChatGPT is getting a lot more visual, with the launch of a new interface

    October 8, 2026

    TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws

    October 8, 2026

    BitMine’s Ethereum buying spree could end in six weeks

    October 8, 2026

    Maryland Demands Answers as Fuel Leak Persists From Joint Base Andrews

    October 8, 2026
    Latest Posts

    British national shot dead in Kashmir by Pakistani security forces | Kashmir

    August 10, 2026

    Climate change doubled likelihood of Canada’s extreme fire weather, study finds

    August 10, 2026

    Scientists say just 7 days of meditation can rewire your brain

    August 10, 2026

    Subscribe to News

    Get the latest sports news from NewsSite about world, sports and politics.

    NCIJ Network is an independent digital news platform delivering trusted investigative journalism, European and global news, in-depth analysis, and fact-based reporting with accuracy, transparency, and integrity.

    Facebook X (Twitter) Instagram Pinterest YouTube

    ChatGPT is getting a lot more visual, with the launch of a new interface

    October 8, 2026

    TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws

    October 8, 2026

    BitMine’s Ethereum buying spree could end in six weeks

    October 8, 2026

    Subscribe to Updates

    Get the latest creative news from FooBar about art, design and business.

    Type above and press Enter to search. Press Esc to cancel.