FBI, Indonesia take down W3LL phishing tool

The FBI and Indonesian authorities disrupted the W3LL phishing kit and marketplace, arrested the alleged developer, and seized infrastructure; W3LL provided phishing-as-a-service (W3LL Panel) and sold access to thousands of compromised accounts, targeted over 56,000 corporate Microsoft 365 accounts and 17,000 victims globally, and enabled MFA bypass and business email compromise that facilitated attempts exceeding $20 million in fraud.