FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts

The FBI and Indonesian National Police dismantled a global phishing operation using the W3LL toolkit that attempted over $20 million in fraud and compromised thousands of user accounts.

• •W3LL is an all-in-one phishing platform that allows criminals to mimic legitimate login pages and harvest user credentials, sold for approximately $500 per customer.
• •The W3LL Store served approximately 500 threat actors and facilitated sales of stolen credentials and unauthorized system access, with more than 25,000 compromised accounts peddled between 2019 and 2023.
• •W3LL utilizes adversary-in-the-middle (AitM) attacks to hijack session cookies and bypass multi-factor authentication, primarily targeting Microsoft 365 credentials.
• •The operation continued through encrypted messaging platforms after W3LLSTORE shutdown in 2023, targeting more than 17,000 victims worldwide between 2023 and 2024.