Fugitive Files

In this episode of Fugitive Files, we dive into the shadowy digital underworld behind one of the most dangerous cyber campaigns ever directed at U.S. critical infrastructure. At the center of it all is Guan Tianfeng, a Chinese national accused of unleashing a global wave of cyberattacks that compromised more than 80,000 Sophos firewalls — the very devices meant to keep networks safe.
According to federal prosecutors, Guan conspired to develop and deploy sophisticated malware exploiting a zero-day vulnerability, CVE-2020-12271, granting him and his co-conspirators unprecedented access to sensitive systems worldwide. Working under the banner of Sichuan Silence Information Technology Co. Ltd., a company later sanctioned by the U.S. Treasury for its alleged ties to Chinese intelligence, Guan’s operation went far beyond simple data theft. Investigators say the group attempted to deploy Ragnarok ransomware, potentially threatening hospitals, energy providers, and government networks.
The Department of Justice has charged Guan with multiple counts of computer fraud, wire fraud, and conspiracy to commit offenses against the United States. The FBI has placed him among its most wanted cyber fugitives, and the U.S. State Department is offering up to $10 million for information leading to his arrest — a reflection of just how seriously Washington views his alleged crimes.
A zero-day exploit turned weapon, a company accused of fronting for foreign intelligence, and a hacker who vanished into the digital ether — this is the story of Guan Tianfeng.
This is Fugitive Files. Let’s get into it.

In this episode of Fugitive Files, we examine the rise of Dagoberto Ramirez-Soto — the alleged leader of a violent criminal enterprise responsible for a string of armed robberies and burglaries targeting Asian American small-business owners between 2017 and 2022. Now one of the FBI’s Most Wanted fugitives, Ramirez-Soto is accused of making false statements, committing identity theft, and obstructing justice to conceal the scope of his operation — a nationwide network built on intimidation, corruption, and cash.
According to federal prosecutors, Ramirez-Soto’s crew operated with the help of inside information from a surprising source: a former NYPD detective, Saul Arismendy De La Cruz, who pleaded guilty to racketeering conspiracy in 2025 after admitting he accepted bribes in exchange for leaking confidential police data to the crew. Court records trace Ramirez-Soto’s criminal history back more than a decade — including a 2011 prison sentence for gold burglaries — but the latest indictment paints a far darker picture, detailing a web of fraud, robbery, and money laundering that extended across state lines.
A trusted cop turned accomplice, a network of thieves targeting the vulnerable, and a fugitive leader still on the run — this is the story of Dagoberto Ramirez-Soto.
This is Fugitive Files. Let’s get into it.

In this episode of Fugitive Files, we investigate Sajid Mir — one of the world’s most elusive terrorists and a key architect behind the 2008 Mumbai attacks, a three-day siege that left 166 people dead, including six Americans. A senior operative of Lashkar-e-Tayyiba (LeT), Mir is accused of directing the assault from afar, guiding gunmen through phone and internet communications as they targeted hotels, a train station, and a Jewish center in coordinated strikes that paralyzed an entire city.
According to U.S. prosecutors, Mir’s reach extended far beyond Mumbai — linking him to a separate LeT plot to attack the Danish newspaper Jyllands-Posten for publishing controversial cartoons, and to extensive recruitment and reconnaissance operations carried out with convicted terrorist David Coleman Headley. Charged with conspiracy to murder, aiding and abetting the killing of U.S. citizens abroad, and providing material support to terrorism, Mir remains a Most Wanted Terrorist, with a $5 million reward offered for information leading to his capture.
A handler turned phantom, a global network built on ideology and deception, and a trail of violence that spans continents — this is the story of Sajid Mir.
This is Fugitive Files. Let’s get into it.

In this episode of Fugitive Files, we track Pavel Valeryevich Frolov — one of six Russian military intelligence officers indicted for a global cyberattack campaign that left a trail of chaos and nearly $1 billion in damages.
A member of the GRU’s elite hacking unit, Frolov stands accused of unleashing NotPetya, one of the most destructive pieces of malware ever deployed — crippling businesses, hospitals, and governments worldwide. Prosecutors say his operations also targeted the 2017 French elections, the 2018 Winter Olympics, and even U.S. critical infrastructure, including Pennsylvania’s Heritage Valley Health System.
Charged with conspiracy, wire fraud, and aggravated identity theft, Frolov faces decades behind bars — but he’s nowhere to be found. The FBI and Rewards for Justice program are offering up to $10 million for information leading to his capture.
A shadow war fought through keyboards, a network of operatives hidden behind screens, and a fugitive hacker wanted by the United States government — this is the story of Pavel Frolov.
This is Fugitive Files. Let’s get into it.

In this episode of Fugitive Files, we track Izmir Ali Koch — a convicted hate criminal who vanished before serving a single day behind bars. Sentenced to 30 months for a brutal, anti-Semitic attack outside a Cincinnati restaurant in 2017, Koch was also found guilty of lying to the FBI. But when the time came to report to prison, he disappeared.
According to the Department of Justice, Koch has deep ties to both Russia and Turkey — and he may have had help. His brother, Baris Koch, now faces federal charges for allegedly handing over a passport and misleading investigators to aid in the escape. With an FBI Most Wanted poster, an outstanding indictment, and a reward on the table, the manhunt is far from over.
A hate crime, a cover-up, and an international flight from justice — this is the story of Izmir Koch.
This is Fugitive Files. Let’s get into it.