In a series of coordinated global raids, law enforcement agencies have targeted a phishing-as-a-service (PhaaS) platform and an encrypted communications network. These operations have led to numerous arrests and disrupted illegal activities spanning multiple continents.
Operation Kaerb: Takedown of iServer Phishing Platform
Europol announced the successful takedown of an international criminal network that operated a PhaaS platform called iServer. This platform was primarily used to unlock stolen or lost mobile phones, affecting over 483,000 victims worldwide. The operation, dubbed “Operation Kaerb,” involved law enforcement agencies from Spain, Argentina, Chile, Colombia, Ecuador, and Peru.
Key points of the operation include:
- Arrest of an Argentinian national responsible for developing and running iServer since 2018
- 17 total arrests and 28 searches were conducted
- Seizure of 921 items, including mobile phones, electronic devices, vehicles, and weapons
- An estimated 1.2 million mobile phones have been unlocked illegally to date
The iServer platform targeted Spanish-speaking nationals from European, North American, and South American countries. It offered a web interface that allowed low-skilled criminals, known as “unlockers,” to harvest device passwords and user credentials from cloud-based mobile platforms.
Ghost Platform Dismantled in Global Action
In a separate but equally significant operation, Europol and the Australian Federal Police (AFP) announced the dismantling of an encrypted communications network called Ghost. This platform facilitated serious organized crime activities worldwide, including drug trafficking, money laundering, and violent acts.
Highlights of the Ghost takedown include:
- 51 suspects arrested across multiple countries
- Seizure of weapons, drugs, and €1 million in cash
- Takedown of a drug lab in Australia
- Infiltration of the platform’s infrastructure by the AFP
The Ghost platform, which operated on custom Android smartphones, used three encryption standards and offered message self-destruction capabilities to evade detection.
Cryptocurrency-Related Law Enforcement Actions
In addition to the phishing and encrypted network takedowns, authorities have been active in combating cryptocurrency-related crimes:
- German authorities seized 47 cryptocurrency exchange services that enabled illegal money laundering activities for cybercriminals, including ransomware groups and darknet dealers.
- The U.S. Department of Justice charged two suspects with conspiracy to steal and launder over $230 million in cryptocurrency from a victim in Washington D.C.
