In a significant blow to cybercrime, law enforcement agencies across multiple continents have successfully dismantled a major phishing-as-a-service (PhaaS) platform known as iServer. This operation, dubbed "Operation Kaerb," targeted a criminal network specializing in unlocking stolen mobile phones through sophisticated phishing attacks. The joint effort involved agencies from Spain, Argentina, Chile, Colombia, Ecuador, and Peru, coordinated by Europol.
The iServer platform, active since 2018, had claimed over 483,000 victims worldwide, primarily Spanish-speaking nationals from Europe, North and South America. The operation resulted in 17 arrests, including the Argentinian mastermind behind the platform, and the seizure of 921 items such as mobile phones, electronic devices, vehicles, and weapons. Investigators estimate that the criminal network had unlocked approximately 1.2 million mobile devices over its five-year operation.
What set iServer apart from typical PhaaS offerings was its specific focus on harvesting credentials to unlock stolen phones. The platform provided a user-friendly web interface that allowed even low-skilled criminals, referred to as "unlockers," to steal device passwords and user credentials from cloud-based mobile platforms. This enabled them to bypass security measures like Lost Mode and gain unauthorized access to stolen devices.
The takedown of iServer marks a significant victory in the fight against cybercrime, highlighting the importance of international cooperation in tackling such threats. As cybercriminals continue to evolve their tactics, law enforcement agencies are demonstrating their ability to adapt and respond effectively to these challenges. The success of Operation Kaerb serves as a warning to cybercriminals and reinforces the commitment of global authorities to protect mobile users from sophisticated phishing schemes
The iServer platform, active since 2018, had claimed over 483,000 victims worldwide, primarily Spanish-speaking nationals from Europe, North and South America. The operation resulted in 17 arrests, including the Argentinian mastermind behind the platform, and the seizure of 921 items such as mobile phones, electronic devices, vehicles, and weapons. Investigators estimate that the criminal network had unlocked approximately 1.2 million mobile devices over its five-year operation.
What set iServer apart from typical PhaaS offerings was its specific focus on harvesting credentials to unlock stolen phones. The platform provided a user-friendly web interface that allowed even low-skilled criminals, referred to as "unlockers," to steal device passwords and user credentials from cloud-based mobile platforms. This enabled them to bypass security measures like Lost Mode and gain unauthorized access to stolen devices.
The takedown of iServer marks a significant victory in the fight against cybercrime, highlighting the importance of international cooperation in tackling such threats. As cybercriminals continue to evolve their tactics, law enforcement agencies are demonstrating their ability to adapt and respond effectively to these challenges. The success of Operation Kaerb serves as a warning to cybercriminals and reinforces the commitment of global authorities to protect mobile users from sophisticated phishing schemes
