Interpol Busts Phishing-as-a-Service Platform ’16Shop,’ Leading to 3 Arrests

Interpol Busts Phishing-as-a-Service Platform ’16Shop,’ Leading to 3 Arrests

Interpol has announced the takedown of a phishing-as-a-service (PhaaS) platform called 16Shop, in addition to the arrests of three individuals in Indonesia and Japan.

16Shop specialized in the sales of phishing kits that other cybercriminals can purchase to mount phishing attacks on a large scale, ultimately facilitating the theft of credentials and payment details from users of popular services such as Apple, PayPal, American Express, Amazon, and Cash App, among others.

less than 70,000 users across 43 countries are estimated to have been compromised via services offered on 16Shop.

The law enforcement operation has also led to the arrest of the site’s administrator, a 21-year-old Indonesian national, along with seizing electronic items and several luxury vehicles in the process. Two other suspected facilitators, one each in Indonesia and Japan, have been apprehended based on additional intelligence.

The disclosure comes as the international police organization said it has seized more than €2 million in connection with a crackdown on West African organized crime dubbed Operation Jackal.

To that end, the cross-border exercise has resulted in the blockade of 208 bank accounts linked to the illicit proceeds of online financial crime, 103 arrests, and the identification of 1,110 suspects.

The development also follows the shutdown of a bulletproof hosting service called Lolek Hosted undertaken by the U.S. government as part of a coordinated law enforcement action in partnership with Poland.