Global phishing operation dismantled, over $20 million in fraud attempted

HackRead reports that a significant global phishing operation, linked to over $20 million in attempted fraud, has been dismantled through a joint effort by the FBI Atlanta Field Office and the Indonesian National Police. This action involved seizing infrastructure and detaining a key suspect.

The operation centered around the W3LL phishing kit, a tool sold for approximately $500 that enabled cybercriminals to create convincing fake login pages for stealing usernames and passwords. This kit was part of a larger cybercrime platform that included W3LLSTORE, an online marketplace facilitating the sale of over 25,000 compromised accounts between 2019 and 2023. Even after W3LLSTORE's shutdown, the operation continued privately via encrypted messaging.

From 2023 to 2024, the kit was used in more than 17,000 attacks worldwide, heavily targeting the United States (56.9%), the United Kingdom (6.9%), and Australia (4.6%), with manufacturing, technology, and professional services being among the most affected industries.

Source: HackRead