“Matthew Philbert, a 33-year-old Canadian from Ottawa, has been sentenced to two years in prison for orchestrating ransomware and other cyberattacks across the country. Arrested by the Ontario Provincial Police in November 2021 after a 23-month investigation, Philbert faced charges of fraud, computer intrusions, and intent to perform computer intrusions. The US Department of Justice also filed charges against him in December 2021, emphasizing the potential impact of his actions on medical procedures for individuals. Philbert, dubbed by Canadian authorities as the “”most prolific cybercriminal,”” admitted in court in October 2023 to targeting over 1,000 entities, including a municipality, police departments, and a school.
Philbert’s modus operandi involved phishing emails with malicious attachments, allowing him to gain full control over victims’ machines. The investigation revealed he received payments in Bitcoin from at least four ransomware attacks, causing estimated losses of just over $49,000. While most victims did not incur financial losses, Philbert’s actions exposed the vulnerability of critical systems. Additionally, authorities found he provided stolen credentials to third parties, widening the scope of his cybercriminal activities.