VERY IMPORTANT

Phobos ransomware is a ransomware-as-a-service operation that has targeted municipal governments, emergency services, education institutions, healthcare organizations, and other critical infrastructure entities since 2019. The ransomware is operated by multiple affiliates and delivered through phishing campaigns, exploitation of vulnerable RDP services, and trojan malware. Phobos encrypts files on compromised systems and demands ransom payments in bitcoin from victims in order to receive a decryptor.