Global Police Operation Dismantles $249-a-Month Phishing Service, Arrests 37 Suspects
Law enforcement agencies across 19 countries have collaborated to dismantle an online platform known as LabHost, which facilitated cybercriminals in launching phishing attacks worldwide. Led by the Metropolitan Police in the United Kingdom, the operation targeted a sophisticated phishing service that generated over £1 million ($1.17 million) in revenue by providing phishing kits to hackers.
According to statements from the Metropolitan Police, LabHost, established in 2021, served as a hub for cybercriminals seeking to create fraudulent websites aimed at obtaining sensitive information such as email credentials, passwords, and banking details. The service operated on a subscription basis, with approximately 2,000 users paying a monthly fee of $249.
The police operation resulted in the arrest of 37 suspects and the execution of over 70 search warrants across various locations globally. Europol, the European Union’s law enforcement agency, coordinated the international efforts, collaborating with agencies including the US Secret Service, the Federal Bureau of Investigation, and authorities from Australia and Finland.
Europol revealed that LabHost had amassed significant amounts of illicit data, including 480,000 bank card numbers, 64,000 pin numbers, and over 1 million passwords for various online services. The platform offered a range of customizable services, enabling criminals to target entities such as financial institutions, postal delivery services, and telecommunication providers.
One of the key features provided by LabHost was a campaign management tool called LabRat, which allowed cybercriminals to orchestrate phishing attacks in real time and bypass security measures like two-factor authentication.
The takedown of LabHost marks a significant victory in the ongoing battle against cybercrime, underscoring the collaborative efforts of law enforcement agencies worldwide to combat illicit online activities and protect individuals and organizations from fraudulent schemes.
