Law enforcement authorities [6] [8], in collaboration with Europol and Ameripol, conducted Operation Kaerb to dismantle the iServer phishing-as-a-service platform, an international criminal network primarily used to unlock stolen or lost mobile phones [2].
Description
The platform targeted over 1.2 million mobile phones and compromised approximately 483,000 victims worldwide [1] [3] [7]. Initially focusing on Spanish-speaking criminals in North and South America, the platform expanded globally since its inception in 2018. It allowed criminals to steal device passwords and user credentials [1] [2], bypass Lost Mode [8], and sell their services to other third parties [8]. During the operation [1] [2] [5] [6] [8], the administrator of the platform [1], an Argentinian national [1] [2] [3] [4] [7] [8], was arrested [1] [3], along with 16 other cybercriminals in Argentina, Chile [1] [2] [3] [4] [7], Colombia [1] [2] [3] [4] [7], Ecuador [1] [2] [3] [4] [7], Peru [1] [2] [3] [4] [7], and Spain [1] [3] [4] [7]. A total of 28 searches were conducted, resulting in the seizure of 921 items [2], including mobile phones [1] [2] [3] [7] [8], electronic devices [2] [8], vehicles [2] [8], and weapons [2] [8]. Additionally, authorities seized the iserver.com domain as part of the operation. Group-IB specialists identified over 2,000 “unlockers” enrolled in the platform [4], uncovering the structure and roles of criminal syndicates operating with iServer [4].
Conclusion
The successful dismantling of the iServer phishing-as-a-service platform through Operation Kaerb has had a significant impact on cybercrime. With the arrest of the platform administrator and other cybercriminals, as well as the seizure of assets and domain, law enforcement authorities have disrupted a major criminal network. Moving forward, it is crucial to continue collaboration between international law enforcement agencies to combat such cyber threats effectively and protect individuals and businesses from falling victim to similar criminal activities.
References
[1] https://www.prnewswire.com/news-releases/group-ib-contributes-to-international-operation-kaerb-that-led-to-the-arrest-of-the-masterminds-behind-the-iserver-phishing-as-a-service-platform-which-claimed-more-than-483-000-victims-globally-302253202.html
[2] https://zerosecurity.org/2024/09/operation-kaerb-global-sting-cripples-phishing-empire-secret-chat-network/
[3] https://www.manilatimes.net/2024/09/19/tmt-newswire/pr-newswire/group-ib-contributes-to-international-operation-kaerb-that-led-to-the-arrest-of-the-masterminds-behind-the-iserver-phishing-as-a-service-platform-which-claimed-more-than-483000-victims-globally/1972778
[4] https://arstechnica.com/security/2024/09/cops-bust-website-crooks-used-to-unlock-1-2-million-stolen-mobile-phones/
[5] https://www.msspalert.com/brief/global-phishing-network-disrupted-in-joint-operation
[6] https://www.techradar.com/pro/huge-phishing-network-which-claimed-480k-victims-broken-by-europol
[7] https://www.asiaone.com/business/group-ib-contributes-international-operation-kaerb-led-arrest-masterminds-behind-iserver
[8] https://thehackernews.com/2024/09/europol-shuts-down-major-phishing.html
