"Operation Kaerb" Takes Down Sophisticated Phishing-as-a-Service Platform “iServer”

A multinational law enforcement operation (Operation Kaerb) dismantled iServer, an automated phishing-as-a-service that for five years enabled low-skilled criminals to harvest Apple and Google account credentials to unlock stolen mobile phones, reportedly affecting about 483,000 victims; Group-IB assisted in the investigation and 17 suspects were arrested. The report highlights the platform’s use of SMS phishing and social-engineering to collect cloud-based credentials and urges improved security awareness to mitigate such attacks.