Forest Global Training Partners

Cyber Risks · Krebs on Security

Pakistan Arrests 21 in ‘Heartsender’ Malware Service

Summary: Authorities in Pakistan arrested 21 people accused of operating Heartsender, a spam and malware service that advertised phishing kits targeting Microsoft 365, Yahoo, AOL, Intuit, iCloud and ID.me users, with raids in Lahore's Bahria Town and Multan on May 15 and 16. Pakistan's NCCIA said the group's tools were tied to more than $50m in losses in the United States alone, while European authorities are investigating 63 additional cases, and the FBI and Dutch Police had seized the service's infrastructure in January 2025.

What's compelling: The NCCIA director called Heartsender 'essentially a cybercrime university that empowered fraudsters globally,' and its 'fud' branding - Fully Un-Detectable - was the product: tooling sold to organized crime groups to run business email compromise schemes that trick companies into paying a third party.

Read the original at Krebs on Security ↗

Topics
Fraud & Scams
Related