US and Indonesian law enforcement authorities have taken down a large-scale phishing network that has plotted over $20 million in fraud.<\/p>\n
Spearheaded by the FBI Atlanta field office, the operation targeted W3LL, a phishing kit<\/a> which enables cybercriminals to impersonate legitimate login pages and trick victims into handing over their usernames and passwords. W3LL capabilities could be acquired for a fee of $500.<\/p>\n The kit was notably sold on ‘W3LL Store,’ a members-only online marketplace, which was active between 2019 and 2023.<\/p>\n According to Fox 5 Atlanta<\/a>, investigators believe the marketplace facilitated the sale of more than 25,000 compromised accounts until its closure in 2023.<\/p>\n The phishing operation continued after the marketplace shut down via encrypted messaging apps. Between 2023 and 2025, W3LL may have been used to target more than 17,000 victims worldwide.<\/p>\n The FBI said<\/a> it has seized the w3ll.store domain and identified its alleged developer, publicly referred to as ‘G.L.’<\/p>\n W3LL was first discovered in 2023<\/a> by cybersecurity firm Group-IB.<\/p>\nW3LL: A Complete Phishing Ecosystem for BEC Attacks<\/strong><\/h2>\n