FBI Dismantles Global Phishing Operation Targeting Over 17,000 Victims Worldwide
The FBI announced the takedown of a global phishing operation called W3LL on Monday. The operation targeted more than 17,000 victims and enabled over $20 million in attempted fraud. Authorities detained the alleged developer and seized key domains with assistance from Indonesian police.
File:FBI Headquarters - J. Edgar Hoover Building (53840035941).jpg: ajay_suresh derivative work: Georgfotoart / Wikimedia (CC BY 2.0)FBI Announces Takedown of W3LL Phishing Operation The FBI announced on Monday that it dismantled a global phishing operation known as W3LL.
The operation targeted more than 17,000 victims worldwide. TechCrunch reported the details of the announcement. The website of the operation displayed a notice stating it has been seized by the FBI. L.
The FBI worked with Indonesia's police in the operation.
Details of the Phishing Kit and Marketplace The W3LL phishing kit allowed deployment of fake versions of websites that mimicked login pages of legitimate services to steal passwords and multi-factor authentication codes from victims.
Cybercriminals could purchase the W3LL phishing kit for $500. The kit enabled cybercriminals to attempt more than $20 million in fraud. The W3LL online marketplace allowed criminals to buy and sell stolen credentials and access to hacked systems.
This facilitated the sale of more than 25,000 compromised accounts. The takedown operation resulted in the seizure of key domains.
International Collaboration in the Operation The FBI's collaboration with Indonesia's police supported the global takedown.
L. occurred as part of these efforts. The operation's reach extended to victims in multiple countries.
Scope and Impact of the Dismantled Network More than 17,000 victims were targeted by the phishing activities linked to W3LL.
The marketplace's sales of compromised accounts numbered over 25,000. The seizure of the website and domains halted further operations.
Story Timeline
4 events- 2026-04-13
FBI announced dismantling of W3LL phishing operation and detention of developer G.L.
1 sourceFBI - 2026-04-13
Seizure of W3LL website and key domains occurred.
2 sourcesFBI · unattributed - Prior to 2026-04-13
W3LL operation targeted over 17,000 victims and facilitated sale of more than 25,000 compromised accounts.
1 sourceFBI - Prior to 2026-04-13
Cybercriminals purchased W3LL phishing kit for $500, enabling over $20 million in attempted fraud.
2 sourcesFBI · unattributed
Potential Impact
- 01
Seizure of domains prevents continued sales of stolen credentials via W3LL marketplace.
- 02
Reduction in phishing kit availability may limit new fraud attempts using similar tools.
- 03
Detention of G.L. could disrupt ongoing operations and deter developers of similar kits.
- 04
International collaboration may lead to more joint takedowns of global cybercrime networks.
Transparency Panel
Related Stories
Oberon Copeland @veryinformed.com (Unsplash)Roblox Announces Age-Locked Account Tiers for Users Under 16 Launching in June
Roblox is introducing Kids accounts for ages 5-8 and Select accounts for ages 9-15, with automatic progression to standard accounts at age 16. The tiers, launching in June, limit access to age-appropriate games and restrict communication features. The platform, with 144 million d…
Achmad Mulyana / Wikimedia (CC BY 3.0)Rockstar Games Hit by Second Data Breach at Third-Party Provider
Rockstar Games confirmed a data breach at a third-party provider, marking the second hack for the company. The group ShinyHunters claimed responsibility and demanded a ransom by April. Rockstar stated the incident will have no impact on operations.
Ckazemi / Wikimedia (CC BY-SA 4.0)Microsoft Increases Prices on Surface Devices Due to Global RAM Shortage
Microsoft has raised prices across its Surface device lineup amid a global RAM shortage. The 13-inch Surface Pro 11 and 13.8-inch Surface Laptop 7 now start at $1,499, up $500 from their original $999 prices. Other models, including the 12-inch Surface Pro and various Surface Lap…