#W3LL dismantled On April 10, 2026, the #FBI #Atlanta Field Office, in partnership with the Indonesian National Police, announced the successful dismantling of a sophisticated global phishing network known as W3LL, which was responsible for over $20 million in attempted fraud. [1, 2, 3] Key Details of the Takedown: The Operation: The joint investigation targeted the “W3LL” phishing kit, a “full-service” cybercrime platform that enabled users to create fake login pages mimicking legitimate websites. International Collaboration: This marked the first coordinated action between US and Indonesian law enforcement to shut down a hacking platform. Arres

#W3LL dismantled
share.google/aimode/N9DRXWTO…
On April 10, 2026, the  #FBI  #Atlanta Field Office, in partnership with the Indonesian National Police, announced the successful dismantling of a sophisticated global phishing network known as W3LL, which was responsible for over $20 million in attempted fraud. [1, 2, 3]
Key Details of the Takedown:

The Operation: The joint investigation targeted the “W3LL” phishing kit, a “full-service” cybercrime platform that enabled users to create fake login pages mimicking legitimate websites.
International Collaboration: This marked the first coordinated action between US and Indonesian law enforcement to shut down a hacking platform.
Arrest and Seizures: Indonesian authorities detained the alleged developer of the phishing tool, identified only as G.L., and seized key infrastructure and domains associated with the network.
Scope of Fraud: Between 2023 and 2024, the kit was used to target more than 17,000 victims worldwide. Between 2019 and 2023, the associated “W3LLSTORE” marketplace facilitated the sale of over 25,000 compromised accounts. [2, 4, 5]

How the Phishing Ring Operated:The W3LL kit was sold for approximately $500 on an underground marketplace. A key feature was its ability to perform “adversary-in-the-middle” (AitM) attacks, allowing criminals to intercept login sessions, capture authentication tokens, and bypass multi-factor authentication (MFA) in real time. [2]
“This wasn’t just phishing—it was a full-service cybercrime platform,” said FBI Atlanta Special Agent in Charge Marlo Graham. [6]
Following the shutdown of the main W3LLSTORE in 2023, the operation had continued through rebranded tools on encrypted messaging apps, which the FBI and Indonesian partners tracked to perform the final takedown. [2, 5]

AI responses may include mistakes.

[1]  fbi.gov/contact-us/field-off…
[2]  yahoo.com/news/articles/fbi-…
[3]  fox5atlanta.com/news/fbi-atl…
[4]  cybersecuritydive.com/news/p…
[5]  fbi.gov/contact-us/field-off…
[6]  yahoo.com/news/articles/fbi-…

— Michael Novakhov (@mikenov) Apr 15, 2026