US EditionThe FBI Just Busted a Global Phishing Empire Targeting Microsoft 365 Accounts—Here's How They Beat MFA
The kit sold for about $500 and helped hackers bypass multi-factor authentication while targeting more than 17,000 victims worldwide, the FBI said.
- On Friday, the FBI and Indonesian National Police dismantled the global W3LL phishing operation, arresting the alleged developer identified as G.L. and seizing infrastructure supporting the cybercrime tool.
- The W3LL kit, sold for roughly $500, enabled criminals to create spoofed login portals and capture session data that allowed them to bypass multi-factor authentication.
- Cybercriminals used the tool to target more than 17,000 victims between 2023 and 2024, attempting over $20 million in fraud while reselling stolen credentials on the W3LLSTORE marketplace.
- "This wasn't just phishing it was a full-service cybercrime platform," stated FBI Atlanta Special Agent in Charge Marlo Graham, emphasizing the agency's commitment to protecting the public.
- International partnerships remain central to federal strategy, following recent operations against phishing-as-a-service platforms like Tycoon and LabHost, which leaders plan to emphasize in coming years.
16 Articles
16 Articles
A joint cyber investigation between the Federal Bureau of Investigation (FBI) in Atlanta (USA) and Indonesian law enforcement authorities allowed the dismantling of a sophisticated global phishing network known as W3LLSTORE, used by cybercriminals to steal bank credentials and commit large-scale fraud.
Digital Dragnets: How The FBI And Indonesia Just Toppled A $20 Million Phishing Empire - Tampa Free Press
A massive global cybercrime ring that fueled millions of dollars in fraud has finally hit a wall. In an unprecedented partnership, the FBI’s Atlanta Field Office joined forces with the Indonesian National Police to dismantle a sophisticated phishing operation that has been haunting the internet for years. The crackdown targeted the developers and infrastructure behind […] Digital Dragnets: How The FBI And Indonesia Just Toppled A $20 Million Phi…
Cybersecurity Dive
IT Security News - cybersecurity, infosecurity newsUS, Indonesia shut down ‘sophisticated’ phishing kit
For a nominal fee, cybercriminals could rent access to a service that maliciously duplicated popular websites’ login portals.
Coverage Details
Bias Distribution
- 60% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
