FBI Dismantles $20 Million Phishing Operation W3LL, Impacting Thousands of Accounts
The FBI, in collaboration with Indonesian law enforcement, has successfully dismantled a large-scale phishing operation known as W3LL. This operation, which has been active since at least 2017, involved the sale of a phishing kit designed to impersonate legitimate login pages, particularly targeting Microsoft 365 accounts. The W3LL Store, a members-only online marketplace, facilitated the sale of these kits and other tools, generating significant revenue for the operators. The marketplace had over 500 active users and listed more than 12,000 items for sale, contributing to an estimated $500,000 in earnings over a 10-month period. The operation continued even after the marketplace's closure in 2023, using encrypted messaging apps to target victims worldwide. The FBI has seized the w3ll.store domain and identified the alleged developer, known publicly as 'G.L.' 
