Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

GXC Team CaaS phishing ecosystem disrupted after global banking-fraud tool sales

Threat Actor Meta
First reported
Last updated
Happening score
H score 31
1 unique sources, 1 articles

Summary

Hide ▲

The arrest of the alleged leader disrupted GXC Team's Crime-as-a-Service phishing ecosystem, cutting off turnkey tooling used for banking fraud by criminal customers worldwide. The group sold customized phishing kits, an Android Trojan, and AI-based voice-scam tools through Telegram channels and underground forums. Its services were linked to attacks on banks, transportation firms, and e-commerce platforms across Spain, Brazil, Slovakia, the UK, and the US.

Related Happenings

FIFA-themed phishing-as-a-service market selling scam kits and ticket-buying bots

Threat Actor Meta
H score42 First: 05.06.2026 10:01 Last: 05.06.2026 10:01 Sources 1

About this happening: A FIFA-themed phishing-as-a-service market is selling ready-made scam kits and ticket-buying bots, lowering the barrier for fraud operators and making takedowns less e...

Open Happening

FBI public service announcement on fake FIFA websites

Public Sector Action
H score21 First: 28.05.2026 22:08 Last: 28.05.2026 22:08 Sources 1

About this happening: The FBI and security researchers warn that FIFA-themed fraud is already targeting World Cup 2026 fans ahead of the June 11 kickoff. Reported activity includes mo...

Open Happening

Ghost Stadium FIFA World Cup fraud campaign

Campaign
H score41 First: 27.05.2026 14:28 Last: 27.05.2026 14:28 Sources 1

About this happening: A Ghost Stadium-linked FIFA impersonation fraud campaign is targeting 2026 FIFA World Cup fans with cloned fifa.com pages, fake ticket and hospitality offers, and...

Open Happening

European Council sanctions Emennet Pasargad over cyber-enabled activity

Regulatory/Legal Action
H score21 First: 26.05.2026 18:48 Last: 26.05.2026 18:48 Sources 1

About this happening: The European Council imposed sanctions on Iranian company Emennet Pasargad, escalating legal pressure over alleged hacking and disinformation activity. The act...

Open Happening

Formula 1 fan scam ecosystem campaign

Campaign
H score34 First: 25.05.2026 12:00 Last: 25.05.2026 12:00 Sources 1

About this happening: A coordinated scam ecosystem is targeting Formula 1 fans with fake streaming apps, counterfeit merchandise, and social-media lures, creating theft, fraud, and malw...

Open Happening

Timeline

  1. 13.10.2025 18:00 2 articles · 9mo ago

    Spanish authorities arrest alleged GXC Team leader

    Legal Policy Action Update

    Spanish authorities arrested a 25-year-old Brazilian national alleged to lead GXC Team, a Crime-as-a-Service operation that sold phishing kits, Android malware, and AI-based tools through Telegram channels and underground forums. The Guardia Civil said the suspect, known online as GoogleXcoder, was detained in San Vicente de la Barquera, Cantabria, after a year-long investigation with six coordinated raids across Spain, while investigators seized electronic devices containing source code, client communications, and cryptocurrency records and began disabling the group's online infrastructure. Authorities said the tools were used in attacks targeting banks, transportation firms, and e-commerce platforms in Spain, Brazil, Slovakia, the UK, and the US.

    Show sources
    Open in new tab