Security News > 2023 > August > INTERPOL shutters '16shop' phishing-as-a-service outfit

INTERPOL has revealed a successful investigation into a phishing-as-a-service operation named "16shop" with arrests of alleged operators made in Indonesia and Japan and the platform shut down.

The operation against 16Shop involved intelligence-sharing between the INTERPOL General Secretariat's cyber crime directorate, plus authorities in Indonesia, Japan and the United States.

Private infosec outfits including Japan's Cyber Defense Institute, Singapore's Group-IB, Palo Alto Networks Unit 42 and Trend Micro also weighed in, with support from cyber crime investigation platform Cybertoolbelt.

Japanese authorities arrested another man allegedly connected to 16shop.

Singaporean infosec outfit Group-IB's analysis of 16Shop led it to assert that over 150,000 phishing domains were created using the outfit's phishing kits.

The infosec firm believes the kits in question had been traded on the cyber criminal underground since at least November 2017, at prices ranging from $60 to $150. "Fake pages mimicking Amazon were offered for $60, and phishing pages targeting the users of American Express for $150," the group told The Register by email.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/08/09/interpol_16shop_phishing_shutdown/