International Phishing Network Targeting 483,000 Victims Worldwide Taken Down

• A complex phishing-as-a-service criminal web was dismantled by a joint operation led by Europol.
• An Argentinian national was discovered to be the administrator of the platform, which helped over 2,000 other cybercriminals.
• The investigation revealed more than 1.2 million mobile phones were unlocked in this malicious operation.

Europol, in collaboration with law enforcement agencies across Europe and Latin America, dismantled an international phishing network responsible for defrauding approximately 483,000 victims globally. The latest Europol release said the phishing service helped unlock stolen or lost mobile phones.

Operation Kaerb, which took place between September 10 and 17, involved a concerted effort from authorities in Spain, Argentina, Chile, Colombia, Ecuador, and Peru. The week-long campaign resulted in 17 arrests, 28 searches, and the seizure of 921 items, including mobile phones, electronic devices, vehicles, and weapons.

The phishing network was orchestrated by an Argentinian national who had been developing phishing services since 2018. He operated a "phishing-as-a-service" platform that allowed other cybercriminals to purchase access to his website and charged extra costs for phishing, SMS, emails, or calls. 

For the past five years, his customers have helped over 2,000 other criminals, known as "unlockers," sell phone unlocking services to those in possession of stolen devices, collectively unlocking more than 1.2 million mobile phones.

This operation marks the first time Europol's European Cybercrime Centre (EC3) has coordinated a large-scale international effort with the Specialised Cybercrime Centre of Ameripol. The investigation, initiated in 2022 after intel from Group-IB, culminated in identifying the majority of the victims and taking decisive action against the network.

Europol played a pivotal role by providing analytical support and deploying experts to Argentina and Spain. These efforts ensured the effective dismantling of the network and highlighted the importance of international collaboration in combating cybercrime.