logo

FBI Dismantles $20m Phishing Operation W3LL

ID: 95ac3f48-9230-570b-9c1c-b5fabd1209fb

STIX ID: report--95ac3f48-9230-570b-9c1c-b5fabd1209fb

Feed Name: Infosecurity Magazine (News)

Threat Score
78/100

Date Published: 2026-04-13

Date Updated: 2026-04-22

...
...

**W3LL phishing ecosystem dismantled:** US and Indonesian law enforcement, led by the FBI Atlanta field office, seized the w3ll.store domain and identified an alleged developer after a years‑long phishing operation that used the W3LL phishing kit and marketplace to enable BEC-focused campaigns; the operation is linked in the report to roughly $20 million in fraud, tens of thousands of compromised accounts, and thousands of worldwide victims, with Group-IB reporting extensive kit use and a full kill‑chain toolset.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.