FBI Atlanta and Indonesian National Police dismantle W3LLSTORE phishing market linked to $20M fraud, seizing domains and detaining developer.

The FBI Atlanta Field Office and the Indonesian National Police have taken down a global phishing operation tied to more than $20 million in attempted fraud, according to authorities. The action included infrastructure seizures and the detention of a suspected developer linked to a widely used phishing kit.

Investigators say the operation was built around a tool known as the W3LL phishing kit, which allowed cybercriminals to create convincing replicas of legitimate login pages. The service was sold for about $500, providing buyers with a ready-to-use method to steal usernames and passwords from targeted victims.

W3LLSTORE

Authorities describe the operation as a full-service cybercrime platform rather than a single tool. The kit was supported by an online marketplace called W3LLSTORE, where stolen credentials were bought and sold. Between 2019 and 2023, the marketplace facilitated the sale of more than 25,000 compromised accounts.

After W3LLSTORE shut down in 2023, the ...