Law enforcement took down a major phishing-as-a-service platform and detained its suspected operator, ending a subscription service that supplied turnkey phishing kits to thousands of criminals.
The platform offered templates impersonating more than 300 banks, delivery services and government portals, complete with hosting, traffic filtering to evade security scanners, and real-time dashboards of harvested credentials.
Investigators estimate kits sold through the service were used to steal credentials from over a million victims. Subscriber records seized during the operation are being shared with police forces internationally.
The takedown follows a broader trend of law enforcement targeting the criminal service economy — the toolmakers and infrastructure providers that lower the barrier to entry for cybercrime.
