'LabHost' Shut Down: Global Police Action Strikes Phishing-as-a-Service Provider
A Great Day for Law Enforcement, a Bad One for Cybercriminals
While we typically report on the latest attacks and data breaches, today we have the pleasure of sharing a massive success story from the other side of the barricade. A huge, international operation coordinated by Europol has resulted in the takedown of one of the world's largest Phishing-as-a-Service (PhaaS) platforms, known as LabHost.
What Was LabHost? Think Netflix, but for Stealing Data
Imagine a platform where, for a small monthly fee, you could "rent" a complete infrastructure for carrying out phishing attacks. LabHost offered its "clients" ready-made, deceptively authentic-looking websites of banks, streaming services, and other institutions. An aspiring criminal needed almost no technical knowledge—just a subscription to start hunting for credentials and financial data from victims worldwide.
The platform was particularly dangerous because it drastically lowered the barrier to entry into the world of cybercrime.
An Operation on an Unprecedented Scale
The action against LabHost is a textbook example of international cooperation. Law enforcement agencies from 19 countries participated in the operation. The results are impressive:
- 37 individuals were arrested, including the platform's developers.
- Dozens of servers that formed the core of LabHost's infrastructure were seized and shut down.
- Over 40,000 malicious domains linked to the service were identified.
- It is estimated that the platform enabled criminals to obtain login credentials from nearly one million victims worldwide.
This is a blow not only to the platform itself but to the entire ecosystem of its users. Many of them, who previously felt untouchable, have just received a strong signal that law enforcement is not asleep.
Coordinated actions like this show that while cybercrime knows no borders, neither does police cooperation. And sometimes, fortunately, it's the latter that comes out on top.
Sources:
- Europol press release on the operation
- Information on the action via the Polish Police website
- Analysis of the operation on CyberDefence24
Aleksander
About the Author

Dyrektor ds. Technologii w SecurHub.pl
Doktorant z zakresu neuronauki poznawczej. Psycholog i ekspert IT specjalizujący się w cyberbezpieczeństwie.
Powiązane artykuły
Globalna Awaria AWS: Jak Jeden Region Wyłączył Pół Internetu
Globalna awaria AWS, z epicentrum w US-EAST-1, sparaliżowała dziś tysiące usług. Od Slacka i Zooma po Fortnite i banki – internet wziął przymusowe wolne. Winny: DNS.

Gigantyczny wyciek danych z platformy E-learningowej w Hiszpanii: 6 milionów użytkowników zagrożonych
Hiszpańska platforma e-learningowa padła ofiarą potężnego ataku, w wyniku którego skradziono dane ponad 6 milionów użytkowników. Informacje trafiły na sprzedaż na forum dla hakerów.
Turyści czy Szpiedzy? Incydent przy Warszawskich Wodociągach To Poważny Sygnał
Dogłębna analiza incydentu przy ujęciu wody "Gruba Kaśka". Zatrzymanie obcokrajowców fotografujących obiekt to podręcznikowy przykład rekonesansu, który może poprzedzać cyberatak na infrastrukturę krytyczną.
Komentarze
Ładowanie komentarzy...