Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
Skip to content
World desk3 min

Ransomware Fixer Allegedly Charged Clients for Keys He Bought From Attackers

Federal prosecutors allege MonsterCloud owner Zohar Pinhasi misrepresented how the company recovered ransomware-encrypted files and charged clients far more than attackers were allegedly paid.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Federal prosecutors allege that Zohar Pinhasi, owner of Florida ransomware recovery company MonsterCloud LLC, told clients the company could decrypt their files without paying attackers—then paid attackers for decryption keys and charged clients far more. Pinhasi has been charged, not convicted, and is presumed innocent unless and until proven guilty.

What prosecutors say MonsterCloud did

According to the U.S. Attorney’s Office for the Eastern District of New York, Pinhasi promoted MonsterCloud as using “proprietary tools” and “advanced decryption techniques” to restore files without paying ransomware operators. Prosecutors allege he had no special decryption technology. Instead, he allegedly contacted the attackers and paid for a key that MonsterCloud employees then tried to use. The EDNY announcement and the Justice Department’s national announcement describe the accusation.

As an Amazon Associate I earn from qualifying purchases.

The distinction matters: using an attacker-provided key to try to restore files is not the same as independently decrypting them. Nor does file recovery alone establish that the intrusion has been contained or the underlying security problem fixed. FBI Assistant Director in Charge James C. Barnacle Jr. said, “As alleged, Zohar Pinhasi claimed to fix ransomware while never remediating the underlying threat.”

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The amounts DOJ says were involved

DOJ cited an alleged August 2023 transaction in which about $8,200 was paid to a cybercriminal while the client was charged about $150,000. Prosecutors further allege that Pinhasi charged clients more than $19 million over the scheme and paid more than $8 million in ransom. These are figures in DOJ’s account of alleged conduct, not findings after a trial.

Charges and case status

The EDNY says a grand jury indicted Pinhasi on September 23, 2026, and he was arraigned on October 7, 2026. The case is docketed as 26-CR-271 (RER). DOJ lists two counts of wire fraud and one count of wire-fraud conspiracy. Pinhasi is also known as “Zack Silver” and “Zack Green.”

If convicted, he faces a maximum sentence of up to 20 years, according to the EDNY announcement. That is a potential maximum, not a sentence imposed or a prediction of the case’s outcome. The FBI is investigating; the EDNY National Security and Cybercrime Section and DOJ Computer Crime and Intellectual Property Section trial attorneys are handling the case.

Rank #2
Daily Meditations for Recovery
  • Remodeler Square 4in White Trim and Specular Silver Cone 12W 2700K LED
  • Black cone downlights provide an ultra performance, high-end solution for adding recessed lighting to existing ceilings
  • Easy to install
  • Provides an ultra performance, high-end solution for adding recessed lighting to existing ceilings

What this case does—and does not—show about ransomware recovery

The case is about prosecutors’ allegation that a provider misrepresented how it obtained keys and what it told clients. It does not establish that every ransomware recovery provider is fraudulent, or that every ransom payment results in successful recovery. A key may fail to restore all data, and paying does not itself resolve the compromise that allowed attackers in.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

DOJ summarizes joint FBI and CISA guidance as not recommending that ransomware victims pay. The guidance warns that payment does not guarantee decryption, that systems or data will no longer be compromised, or that data will not be leaked. DOJ’s summary is available in its announcement.

Rank #3
Legend Addiction Recovery Journal, Guided Addict Workbook, Black
  • SIMPLE TOOL TO SUPPORT YOUR RECOVERY – This addiction recovery journal is designed to support your recovery journey and is compatible with 12 Steps or any other program. Daily pages help you stay accountable and motivated to keep moving forward.
  • DAILY QUESTIONS & WORKBOOK EXERCISES – The addiction journal features two new questions each day to encourage reflection. The addiction workbook at the front includes exercises to help you understand your triggers and develop coping strategies.
  • TRACK & CELEBRATE YOUR PROGRESS – Each week of this sobriety guided journal includes a review section to reflect on your progress, address the challenges you’ve faced, and celebrate your milestones and achievements.
  • DISCREET COVER & LASTS 6 MONTHS – Measuring 7 by 10 inches, this discreet hardcover journal lasts 6 months. The addiction recovery workbook has thick 120gsm paper, lay-flat binding, a pen loop, an elastic band, and 3 sheets of stickers.
  • 60-DAY SATISFACTION GUARANTEE – We will exchange or refund your self help journal for women and men if you aren’t satisfied with aa book cover journal. Reach out to us via message to refund your sobriety journal for women and best sobriety gifts.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Questions to ask a recovery provider

This case is not a finding about other providers. For a recovery offer, ask for clear written answers before authorizing work:

  • What method will be used? Ask whether recovery relies on backups, an available decryption tool, an attacker-supplied key, or another approach.
  • Could a ransom be paid? Ask whether that is part of the plan, who would authorize it, and how the payment and any related fees would be disclosed.
  • What exactly is included? Have the contract specify deliverables, fees, and whether incident containment and remediation are included or separate.
  • What outcome is promised? Clarify what happens if files cannot be restored, and do not treat an attempt to use a key as a guarantee of recovery or proof that the intrusion is resolved.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.