The international policing authority, Interpol, has made a much-lauded breakthrough in the fight against cybercrime. They recently announced the successful dismantling of an infamous phishing-as-a-service (PhaaS) platform: 16Shop. More excitingly, the law enforcement operation culminated in the apprehension of three individuals in Indonesia and Japan who have been associated with the platform.
16Shop had carved a niche for itself providing phishing kits. Thousands of cybercriminals had depended on these resources to wage large-scale phishing expeditions. In doing so, these cyber miscreants facilitated the illegal acquisition of credentials such as payment and personal details from a vast cache of major international platforms. Esteemed services like PayPal, Amazon, Apple, and American Express were among the many victims of this digital heist.
So, how did this happen? Well, to start, victims would get an email containing a link or a pdf file which when accessed would lead them to another site. At this site, they would be prompted to input personal and financial details like credit card information. These details were then pilfered and used to extract money from the unsuspecting victims. Unsurprisingly, 16Shop commands a large victim base - it is estimated that the platform succeeded in compromising up to 70,000 users spread across a whopping 43 nations.
The successful operation by Interpol not only led to the arrest of the platform's 21-year-old admin in Indonesia, but it also resulted in the seizure of fancy vehicles and various pieces of electronic equipment. Additional intelligence led to the arrest of two other suspected accomplices in Indonesia and Japan.
What makes this takedown significant is the role played by Group-IB. This cybersecurity firm based in Singapore had a hand in the efforts that led to the unraveling of the platform. More than 150,000 phishing domains used by 16Shop were generated using the platform's phishing kits. These counterfeit sites targeted users in several countries, among them the U.S., U.K., Germany, and France.
Underground forums were havens where these fraudulent kits were sold, going for between $60 and $150 depending on the brand being impersonated. The fake pages were multilingual with content adjusted based on the victim's location.
Interpol's breakthrough comes in the wake of another significant accomplishment in its fight against cybercrime. Together with a multinational policing coalition, the authority seized more than €2 million through Operation Jackal aimed at West African organized crime. With 208 blocked bank accounts linked to illicit online financial activities, 103 arrested criminals, and more than 1,100 suspects identified this has been a sweeping success.
This breakdown of cyber operations casts a light on the dedication and tireless efforts of these policing authorities in ensuring that complex web-based crimes are considerably reduced. Sign up today and ensure your digital safety with top-notch cybersecurity news, insights, and tips.
At Darksteel Technologies, we are an Orlando based business that can handle all aspects of your IT security. Providing compliance, training, malware protection, cloud security, devsecops, vulnerability management, penetration testing, architecture design and any other information security requirement your business needs. We focus on your cybersecurity so you don't have to.