logo

Spain dismantles “GXC Team” cybercrime syndicate, arrests leader

ID: dd9e2761-15b6-5eab-b319-320c26512a86

STIX ID: report--dd9e2761-15b6-5eab-b319-320c26512a86

Feed Name: Bleeping Computer

Threat Score
78/100

Date Published: 2025-10-11

Date Updated: 2026-07-17

Author: Bill Toulas

...
...

Spanish Guardia Civil dismantled the GXC Team, a CaaS operation led by a 25-year-old alleged operator known as “GoogleXcoder,” seizing devices, phishing kit source code, communications and stolen cryptocurrency after coordinated raids across Spain; the group deployed AI-powered phishing kits (powering ~250 phishing sites), at least nine Android SMS/OTP-stealing malware strains, and supported clients via Telegram and forums, with investigations and potential further arrests ongoing.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.