LabHost phishing service with 40,000 domains disrupted, 37 arrested

LabHost phishing service with 40,000 domains disrupted, 37 arrested

April 18, 2024 at 05:57AM

A global law enforcement operation disrupted the LabHost phishing platform, leading to the arrest of 37 suspects, including the original developer. LabHost, launched in 2021, offered phishing tools and infrastructure, with a popular feature called LabRat. The operation involved 19 countries and private sector partners and resulted in the seizure of servers and warnings to 800 users.

Key Takeaways from Meeting Notes:

– LabHost’s phishing-as-a-service (PhaaS) platform was disrupted in a year-long global law enforcement operation, leading to the arrest of 37 suspects, including the original developer.
– The platform enabled cybercriminals to launch effective phishing attacks using a variety of kits for banks and services in North America.
– Law enforcement’s international operation involved police forces and partners from the private sector, resulting in the takedown of LabHost’s infrastructure and the arrest of individuals connected to the service.
– Europol’s investigation revealed that LabHost had at least 10,000 users worldwide and had stolen approximately 480,000 credit cards, 64,000 PINs, and one million passwords.
– LabHost’s operators had received $1,173,000 from user subscriptions before the takedown, and 800 users were warned about upcoming investigations after authorities took control of LabHost’s infrastructure.
– The platform experienced a massive outage last year, leading to speculation that it was exit scamming, but it returned to full operations in December 2023.

These clear takeaways summarize the significant events and impact of the law enforcement operation on LabHost and its illicit activities.

Full Article