Forest Global Training Partners

Cyber Risks · Krebs on Security

Karma Catches Up to Global Phishing Service 16Shop

Summary: INTERPOL said last week it shut down 16Shop, a phishing-as-a-service platform launched in 2017, with authorities in Indonesia arresting the 21-year-old proprietor and one alleged facilitator and a third suspect apprehended in Japan. INTERPOL's statement says the platform sold hacking tools used to compromise more than 70,000 users in 43 countries, and the service supplied brand-specific phishing kits, hosted domains for stolen credentials, localized pages by victim geolocation, and kept a blacklist of security-company Internet addresses.

What's compelling: The platform ran for roughly six years and, by INTERPOL's own count, reached more than 70,000 users across 43 countries - a figure researchers describe as almost certainly conservative - and its kits tailored what they harvested to where the victim sat, asking Japanese targets for Web ID and Card Password and US targets for Social Security Numbers.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related