Federal authorities have arrested and indicted the head of a Florida-based ransomware remediation firm, accusing him of orchestrating a multimillion-dollar fraud scheme. Zohar Pinhasi, the 50-year-old owner of MonsterCloud LLC, faces multiple wire fraud charges after prosecutors revealed his proprietary recovery tools were nothing more than covert ransom payments made to cybercriminals at heavily marked-up prices.
According to charging documents unsealed in a Brooklyn federal court, Pinhasi marketed MonsterCloud as a specialized agency capable of restoring locked systems without giving in to hacker demands. The company website explicitly warned prospective clients that paying ransoms invited further attacks and failed to guarantee data recovery. Relying on these assurances, hundreds of businesses across the United States and Canada turned to the firm during critical operational crises.
Investigators state that Pinhasi and his associates possessed no specialized decryption technology. Instead, operations involved quietly negotiating with attackers, purchasing the required decryption keys, and charging clients up to double the actual ransom cost. Internal communications cited in the indictment show Pinhasi explicitly instructing staff to avoid mentioning ransom payments and to reference trade secrets whenever questioned about their methodology.
The indictment outlines that MonsterCloud extracted more than $19 million from victims while funneling a fraction of that amount, roughly $8 million, directly to the hackers. Pinhasi surrendered to federal authorities and pleaded not guilty, securing release on a $2 million bond. If convicted on all counts, he faces a maximum prison sentence of 60 years.
Comments