FBI and Indonesian Police Dismantle W3LLSTORE Phishing Marketplace Linked to $20 Million Fraud

FBI Atlanta and Indonesian National Police seized domains and detained the alleged developer of the W3LL phishing kit, a tool sold for approximately $500 that enabled criminals to create convincing login page replicas and bypass multi-factor authentication by capturing session data. Between 2019 and 2023, the W3LLSTORE marketplace facilitated over 25,000 compromised accounts; after its 2023 closure, operations migrated to encrypted messaging platforms. From 2023 to 2024, the kit was used in over 17,000 attacks, representing the first coordinated US-Indonesian enforcement action against a phishing kit developer.