Apr 13, 2026 • [email protected] (The Hacker News)
FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts
The FBI and Indonesian National Police jointly dismantled a global phishing operation that utilized the W3LL off-the-shelf phishing toolkit to steal thousands...
Executive Summary
The FBI and Indonesian National Police jointly dismantled a global phishing operation that utilized the W3LL off-the-shelf phishing toolkit to steal thousands of victim credentials and attempt over $20 million in fraud. The alleged developer of the toolkit was detained as part of the operation. W3LL provided threat actors with pre-built capabilities to conduct large-scale credential harvesting campaigns. Organizations should enforce multi-factor authentication, conduct regular phishing awareness training, and monitor for unauthorized login attempts to mitigate risks from such toolkits.
Summary
The U.S. Federal Bureau of Investigation (FBI), in partnership with the Indonesian National Police, has dismantled the infrastructure associated with a global phishing operation that leveraged an off-the-shelf toolkit called W3LL to steal thousands of victims' account credentials and attempt more than $20 million in fraud. In tandem, authorities detained the alleged developer, who has&
Published Analysis
The FBI and Indonesian National Police jointly dismantled a global phishing operation that utilized the W3LL off-the-shelf phishing toolkit to steal thousands of victim credentials and attempt over $20 million in fraud. The alleged developer of the toolkit was detained as part of the operation. W3LL provided threat actors with pre-built capabilities to conduct large-scale credential harvesting campaigns. Organizations should enforce multi-factor authentication, conduct regular phishing awareness training, and monitor for unauthorized login attempts to mitigate risks from such toolkits. The U.S. Federal Bureau of Investigation (FBI), in partnership with the Indonesian National Police, has dismantled the infrastructure associated with a global phishing operation that leveraged an off-the-shelf toolkit called W3LL to steal thousands of victims' account credentials and attempt more than $20 million in fraud. In tandem, authorities detained the alleged developer, who has& The U.S. Federal Bureau of Investigation (FBI), in partnership with the Indonesian National Police, has dismantled the infrastructure associated with a global phishing operation that leveraged an off-the-shelf toolkit called W3LL to steal thousands of victims' account credentials and attempt more than $20 million in fraud. In tandem, authorities detained the alleged developer, who has&
Linked Entities
- W3LL