Security News > 2023 > August > Interpol Busts Phishing-as-a-Service Platform '16Shop,' Leading to 3 Arrests

Interpol has announced the takedown of a phishing-as-a-service platform called 16Shop, in addition to the arrests of three individuals in Indonesia and Japan.

16Shop specialized in the sales of phishing kits that other cybercriminals can purchase to mount phishing attacks on a large scale, ultimately facilitating the theft of credentials and payment details from users of popular services such as Apple, PayPal, American Express, Amazon, and Cash App, among others.

Singapore-based cybersecurity firm Group-IB, which partook in the efforts, said over 150,000 phishing domains were created using the phishing kits to target users in Germany, Japan, France, the U.S., the U.K., and Thailand, among others.

The phishing kits were peddled on underground forums for anywhere between $60 and $150 based on the brand impersonated since at least November 2017, with the bogus pages supporting more than eight languages to serve content based on the victim's geolocation.

"Phishing kits represent archive files with a set of scripts that ensure the work of a phishing website," the company said.

"This toolset enables cybercriminals with modest programming skills to deploy phishing pages quickly and in large numbers, often using them as substitutes for each other."

News URL

https://thehackernews.com/2023/08/interpol-busts-phishing-as-service.html