KSeF 2.0 Scams: Phantom Invoices, Fake Tax Office Emails and How to Protect Your Business
Mandatory KSeF is here. Learn how phantom invoices and fake tax office emails target Polish businesses, and how to protect your company from fraud.
Incidents
LabHost Takedown: Global Police Operation Hits Phishing-as-a-Service Providers
Europol-coordinated police from 19 countries took down LabHost, one of the world's largest Phishing-as-a-Service platforms, arresting 37 suspects.
A Big Day for Law Enforcement, a Bad One for Cybercriminals
Most days, we're tracking reports of new attacks and data breaches. Today, we're pleased to share news of a major win on the other side of the fight. A large-scale international operation coordinated by Europol has taken down LabHost, one of the world's largest Phishing-as-a-Service (PhaaS) platforms.
What Was LabHost? Think Netflix, but for Stealing Data
Picture a platform where, for a small monthly fee, anyone could "rent" a complete infrastructure for running phishing attacks. LabHost gave its "customers" ready-made, convincing copies of websites belonging to banks, streaming services and other organizations. A novice criminal needed almost no technical skill. A subscription was enough to start harvesting login credentials and financial data from victims around the world.
The platform was especially dangerous because it made it far easier for newcomers to get into cybercrime.
An Operation of Unprecedented Scale
The action against LabHost is a textbook example of international cooperation. Agencies from 19 countries took part, and the results are impressive:
- 37 people were arrested, including the platform's creators.
- Dozens of servers that formed the core of LabHost's infrastructure were seized and shut down.
- More than 40,000 malicious domains linked to the service were identified.
- Criminals using the platform are estimated to have stolen login credentials from nearly one million victims worldwide.
The blow lands on more than the platform itself. It hits the whole network of people who used it. Many of them felt untouchable until now, and they have just received a clear signal that law enforcement is paying attention.
Coordinated actions like this show that cybercrime knows no borders, and neither does police cooperation. Sometimes, fortunately, the police come out on top.
Sources:
- Europol's announcement of the operation
- Information about the operation on the Polish Police website (Policja.pl)
- Analysis of the operation by CyberDefence24
Aleksander
Read also: AI as a New Weapon for Cybercriminals and Poland in the Crosshairs: The Scale of Cyberattacks.
