FBI and Indonesian Authorities Dismantle Prolific “W3LL” Phishing Empire

The FBI Atlanta Field Office and Indonesian authorities dismantled the W3LL phishing kit operation—a MaaS platform that harvested credentials and live session data to bypass MFA, facilitated over $20M in attempted fraud, and enabled sale of more than 25,000 compromised accounts and targeting of thousands of additional victims. The investigation led to seizure of infrastructure and the detention of the alleged developer in Indonesia, marking a precedent for trans-Pacific action against phishing-kit developers.