Cyber Security News

Ransomware Gang Busted by Authorities; Devices and Evidence Seized

Thai authorities have dismantled a sophisticated criminal enterprise operating from the eight-storey Antai Holiday Hotel in Pattaya, unearthing both a high-stakes gambling den and a cybercrime ring specializing in ransomware attacks.

The raid, conducted at 11:30 p.m. on June 16, followed intelligence reports of suspicious activity and heavy foreign presence at the hotel, particularly during nighttime hours, as per a report by Bitdefender.

Floor-by-Floor Search Uncovers Dual Criminal Operations

Authorities executed a meticulous floor-by-floor search of the hotel. The second floor revealed a bustling gambling operation, complete with poker tables, large quantities of cash chips, and around 20 foreign gamblers.

The third through seventh floors were used as guest accommodations, while the top floor housed the nerve center of a ransomware operation.

On the eighth floor, police apprehended six Chinese nationals who were actively distributing malicious links to Chinese companies, aiming to infect their systems with ransomware.

dramatic raid at a hotel in central Pattaya

The suspects, described as paid employees of a larger criminal gang, were found with nine laptops and 15 mobile devices, all of which were seized as evidence.

International Arrests and Seizures

In total, at least 20 foreigners were arrested in the raid, most of whom were Chinese nationals, with others from Vietnam, Singapore, Cambodia, and Myanmar.

The suspects face charges ranging from illegal gambling to immigration violations and cybercrime. All have been transferred to investigators for prosecution and, if convicted, will be deported to their home countries and permanently barred from re-entering Thailand.

A police-released photograph captured the aftermath: officers standing behind the apprehended suspects, who sat cross-legged with heads bowed behind the confiscated computers and mobile devices—a stark image of the crackdown’s reach.

A Shock for Hotel Guests and a Sign of Evolving Crime

The arrests came as a shock to other hotel guests, many of whom were likely unaware of the illicit activities happening just floors above or below their rooms.

The Antai Holiday Hotel has since stopped accepting reservations, further underscoring the scale of the investigation.

This operation highlights a growing trend: cybercrime is increasingly intertwined with traditional organized crime, such as gambling, money laundering, and identity theft.

Law enforcement raids now routinely yield not only hard drives and cryptocurrency wallets but also poker chips, burner phones, fake passports, and databases of stolen identities.

The Pattaya hotel raid serves as a stark reminder of the evolving nature of organized crime and the challenges authorities face in combating both digital and physical criminal enterprises.

The investigation is ongoing, with further details expected as authorities continue to unravel the full extent of the gang’s operations.

Find this News Interesting! Follow us on Google News, LinkedIn, and X to Get Instant Updates

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago