logo

Police arrest seller of JokerOTP MFA passcode capturing tool

ID: d083e0ef-0d52-5074-bc18-58397de93b08

STIX ID: report--d083e0ef-0d52-5074-bc18-58397de93b08

Feed Name: Bleeping Computer

Threat Score
75/100

Date Published: 2026-02-11

Date Updated: 2026-04-20

Author: Bill Toulas

...
...

The Netherlands Police arrested a 21-year-old suspected seller of JokerOTP — a phishing-as-a-service tool that automated calls to intercept one-time passwords (OTPs) and enable account takeovers; the multi-year investigation dismantled the platform after it allegedly facilitated over 28,000 attacks across 13 countries causing around $10M in losses, targeted major services (PayPal, Venmo, Coinbase, Amazon, Apple), and identified numerous buyers who will be prosecuted.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.