Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

FBI-led takedown of W3LL phishing network

Law Enforcement
First reported
Last updated
Happening score
H score 33
1 unique sources, 1 articles

Summary

Hide ▲

FBI Atlanta and US and Indonesian law enforcement took down the W3LL phishing network, escalating a cross-border cybercrime case tied to more than $20 million in fraud. The operation also included seizure of the w3ll.store domain, cutting off a marketplace used to sell phishing tools and stolen-account access. Investigators said the network had continued operating through 2025 and may have reached more than 17,000 victims worldwide. The action increases pressure on the broader phishing ecosystem by disrupting a named kit, a domain, and an alleged developer linked to the operation.

Related Happenings

Pink new extortion brand within The Com

Threat Actor Meta
H score31 First: 08.07.2026 19:47 Last: 08.07.2026 19:47 Sources 1

About this happening: Pink is a The Com-linked extortion brand associated with O-UNC-066 that is now being used in a voice-based phishing campaign against Microsoft 365 users. The a...

Open Happening

CypherLoc phishing-led browser scareware campaign

Campaign
H score49 First: 20.05.2026 13:00 Last: 20.05.2026 13:00 Sources 1

About this happening: The CypherLoc operation has driven around 2.8 million attacks since the start of 2026, using phishing emails to send users to malicious pages that lock browsers an...

Open Happening

Interpol Operation Ramz cybercrime crackdown in MENA

Law Enforcement
H score33 First: 18.05.2026 17:00 Last: 18.05.2026 17:00 Sources 1

About this happening: INTERPOL-led Operation Ramz disrupted Sniper Dz, a decade-long phishing-as-a-service (PhaaS) platform, during October 2025-February 2026. Authorities in 13 M...

Open Happening

Vercel v0.dev phishing campaign using GenAI-built lure pages

Campaign
H score29 First: 07.05.2026 11:30 Last: 07.05.2026 11:30 Sources 1

About this happening: A campaign using Vercel v0.dev to build highly convincing phishing pages has lowered the skill and cost needed to run fraudulent sign-in and job-lure attacks. The activity...

Open Happening

QR code phishing surged across email threats in Q1 2026

Trend
H score73 First: 05.05.2026 09:35 Last: 05.05.2026 09:35 Sources 1

About this happening: Q1 2026 email-threat telemetry shows QR code phishing and CAPTCHA-gated phishing rising quickly, increasing the risk of credential theft across organizations....

Open Happening

Timeline

  1. 13.04.2026 13:35 2 articles · 3mo ago

    US and Indonesian law enforcement take down W3LL phishing network

    Legal Policy Action Update

    US and Indonesian law enforcement, spearheaded by the FBI Atlanta field office, took down the W3LL phishing network, seized the w3ll.store domain, and targeted a phishing kit that impersonated legitimate login pages to steal usernames and passwords; investigators said the operation had plotted over $20 million in fraud, identified the alleged developer as G.L., and may have reached more than 17,000 victims worldwide between 2023 and 2025.

    Show sources
    Open in new tab