美通社

2024-04-19 02:50

Group-IB takes part in a global operation to cripple Canadian Phishing-as-a-Service provider LabHost

SINGAPORE, April 18, 2024 /PRNewswire/ -- Group-IB, a leading cybersecurity company aimed at investigating, preventing, and fight digital crime announced today that it participated in a coordinated global takedown operation against prominent Canadian Phishing-as-a-Service (PhaaS) provider LabHost, which has led to the arrest of 37 suspects across the United Kingdom and around the world by law enforcement agencies. As part of the operation, Group-IB also conducted an extensive analysis of LabHost's criminal history and infrastructure, including insights into LabHost's administrative platform and the services it provides to its purported user base which exceeds 2,000 subscribers worldwide, who illegally obtained around 480,000 card numbers, 64,000 pin numbers, and over 1 million passwords from victims used for websites and other online services, according to law enforcement agencies.

"By leveraging our Threat Intelligence and Digital Risk Protection, we are able to identify and monitor phishing attacks and websites like those deployed by LabHost and its subscribers around the world, enabling us to actively alert and protect our customers, and in turn, their customers as well," said Dmitry Volkov, Chief Executive Officer of Group-IB. "Today's takedown operation demonstrates the agility and responsiveness of our decentralized Digital Crime Resistance Centers, and how quickly we can provide immediate and local assistance wherever our customers may be."

(Above) The “membership plans” that target LabHost offers as part of its turn-key services.
(Above) The “membership plans” that target LabHost offers as part of its turn-key services.

First uncovered in late 2021, LabHost emerged as a fully automated Phishing-as-a-Service (PhaaS) platform, streamlining the creation of phishing websites meticulously mirroring the interface and functionality of prominent banking, postal, and financial entities, aimed at intercepting, seizing, and profiting from users' personal, credit card, and online banking credentials. Users are prompted to select from various "membership plans," tailored to target businesses and individuals in either the United States and Canada, or globally, akin to mobile subscription models. These plans encompass "standard," "premium," and "world membership" tiers, priced between US$179 and US$300 monthly, with options for monthly, quarterly, or annual billing cycles.

Screenshots of the “LabRat” console which enables cybercriminals to monitor its victims in real time and generate prompts that would direct their victims to provide sensitive information including two-factor authentication codes and other financial and personal details.
Screenshots of the “LabRat” console which enables cybercriminals to monitor its victims in real time and generate prompts that would direct their victims to provide sensitive information including two-factor authentication codes and other financial and personal details.

 

For media inquiries, please contact pr@group-ib.com

source: Group-IB

《說說心理話》:講講常見年輕人理財問題!想「人有我有」?認可理財社工分享理財觀念小秘訣!► 即睇

人氣文章
財經新聞
評論
專題
專業版
HV2
精裝版
SV2
串流版
IQ 登入
強化版
TQ
強化版
MQ

【etnet 30周年】多重慶祝活動一浪接一浪,好禮連環賞!

【etnet30周年連環賞】睇住賞維柏健webber naturals ®健骨MSM(活絡配方) (價值HK$412)

etnet榮獲HKEX Awards 2023 「最佳證券數據供應商」大獎

貨幣攻略

大國博弈

傾力救市

說說心理話

Watche Trends 2024

北上食買玩

Art Month 2024

理財秘笈

秋天養生食療

消委會報告

山今養生智慧

輕鬆護老