FBI, Dutch Police Disrupt ‘Manipulaters’ Phishing Gang
Summary: The FBI and Dutch national police seized 39 servers and domains abroad tied to a Pakistan-based spam and malware service marketed as Heartsender, Fudpage and Fudtools, whose 'fud' branding stood for 'Fully Un-Detectable.' The DOJ, calling the group Saim Raza, said the sites sold phishing kits and email extractors used mainly by transnational organized crime groups to run business email compromise schemes, and Dutch authorities said the seized servers held millions of victim records, including at least 100,000 pertaining to Dutch citizens.
What's compelling: The core product was a spam delivery service advertising phishing kits for Microsoft 365, Yahoo, AOL, Intuit, iCloud and ID.me, and the DOJ tied it directly to BEC payments redirected to accounts the perpetrators controlled; the Dutch said the investigation into the buyers, likely including Dutch nationals, is not finished.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026