W3LL phishing service sold for $500 dismantled by the FBI

The FBI and Indonesian National Police dismantled the W3LL phishing kit—a paid phishing service (about $500 access) that deployed near-identical fake login portals to capture credentials and session data (enabling MFA bypass). Investigators seized infrastructure and domains, arrested an alleged developer, and tied the tool to the W3LLSTORE marketplace where over 25,000 accounts were sold; the kit was used in campaigns affecting more than 17,000 victims between 2023–2024 and linked to over $20 million in attempted fraud.