Group-IB takes part in a global operation to cripple Canadian Phishing-as-a-Service provider LabHost

April 19, 2024 04:50 AM AEST | By Cision

Google News:

Group-IB takes part in a global operation to cripple Canadian Phishing-as-a-Service provider LabHost — Image source: Kalkine Media

Recent News

Lithium Royalty Corp. Announces Final Results of Substantial Issuer Bi...

Why ASX 200 Listed IAG (ASX:IAG) Shares Fell Despite Strategic WA Deal

Appen (ASX:APX) rallies as profitability focus lifts ASX 200 AI outloo...

Small Caps Gain Momentum on RBA Rate Outlook as ASX 200 Climbs

SINGAPORE, April 18, 2024 /PRNewswire/ -- Group-IB, a leading cybersecurity company aimed at investigating, preventing, and fight digital crime announced today that it participated in a coordinated global takedown operation against prominent Canadian Phishing-as-a-Service (PhaaS) provider LabHost, which has led to the arrest of 37 suspects across the United Kingdom and around the world by law enforcement agencies. As part of the operation, Group-IB also conducted an extensive analysis of LabHost's criminal history and infrastructure, including insights into LabHost's administrative platform and the services it provides to its purported user base which exceeds 2,000 subscribers worldwide, who illegally obtained around 480,000 card numbers, 64,000 pin numbers, and over 1 million passwords from victims used for websites and other online services, according to law enforcement agencies.

"By leveraging our Threat Intelligence and Digital Risk Protection, we are able to identify and monitor phishing attacks and websites like those deployed by LabHost and its subscribers around the world, enabling us to actively alert and protect our customers, and in turn, their customers as well," said Dmitry Volkov, Chief Executive Officer of Group-IB. "Today's takedown operation demonstrates the agility and responsiveness of our decentralized Digital Crime Resistance Centers, and how quickly we can provide immediate and local assistance wherever our customers may be."

(Above) The “membership plans” that target LabHost offers as part of its turn-key services.

First uncovered in late 2021, LabHost emerged as a fully automated Phishing-as-a-Service (PhaaS) platform, streamlining the creation of phishing websites meticulously mirroring the interface and functionality of prominent banking, postal, and financial entities, aimed at intercepting, seizing, and profiting from users' personal, credit card, and online banking credentials. Users are prompted to select from various "membership plans," tailored to target businesses and individuals in either the United States and Canada, or globally, akin to mobile subscription models. These plans encompass "standard," "premium," and "world membership" tiers, priced between US$179 and US$300 monthly, with options for monthly, quarterly, or annual billing cycles.

Screenshots of the “LabRat” console which enables cybercriminals to monitor its victims in real time and generate prompts that would direct their victims to provide sensitive information including two-factor authentication codes and other financial and personal details.

For media inquiries, please contact [email protected]

Disclaimer

The content, including but not limited to any articles, news, quotes, information, data, text, reports, ratings, opinions, images, photos, graphics, graphs, charts, animations and video (Content) is a service of Kalkine Media Pty Ltd (“Kalkine Media, we or us”), ACN 629 651 672 and is available for personal and non-commercial use only. The principal purpose of the Content is to educate and inform. The Content does not contain or imply any recommendation or opinion intended to influence your financial decisions and must not be relied upon by you as such. Some of the Content on this website may be sponsored/non-sponsored, as applicable, but is NOT a solicitation or recommendation to buy, sell or hold the stocks of the company(s) or engage in any investment activity under discussion. Kalkine Media is neither licensed nor qualified to provide investment advice through this platform. Users should make their own enquiries about any investments and Kalkine Media strongly suggests the users to seek advice from a financial adviser, stockbroker or other professional (including taxation and legal advice), as necessary.
The content published on Kalkine Media also includes feeds sourced from third-party providers. Kalkine does not assert any ownership rights over the content provided by these third-party sources. The inclusion of such feeds on the Website is for informational purposes only. Kalkine does not guarantee the accuracy, completeness, or reliability of the content obtained from third-party feeds. Furthermore, Kalkine Media shall not be held liable for any errors, omissions, or inaccuracies in the content obtained from third-party feeds, nor for any damages or losses arising from the use of such content.
Kalkine Media hereby disclaims any and all the liabilities to any user for any direct, indirect, implied, punitive, special, incidental or other consequential damages arising from any use of the Content on this website, which is provided without warranties. The views expressed in the Content by the guests, if any, are their own and do not necessarily represent the views or opinions of Kalkine Media. Some of the images/music that may be used on this website are copyrighted to their respective owner(s). Kalkine Media does not claim ownership of any of the pictures displayed/music used on this website unless stated otherwise. The images/music that may be used on this website are taken from various sources on the internet, including paid subscriptions or are believed to be in public domain. We have made reasonable efforts to accredit the source wherever it was indicated as or found to be necessary.

This disclaimer is subject to change without notice. Users are advised to review this disclaimer periodically for any updates or modifications.