In a joint operation in Latin America and Europe, a massive phishing network that stole the personal information of half a million people has been dismantled. The operation, dubbed “Operation Kaerb”, resulted in the arrest of 17 people and the seizure of hundreds of electronic devices.
Cyber-network taken down in Europe with Operation Kaerb
According to a statement by cybersecurity firm Group-IB, the phishing network, which has been in operation since 2018, was run by an individual based in South America. He developed an automated phishing platform called “iServer” that allowed criminals to conduct large-scale phishing attacks.
iServer targeted mostly Spanish-speaking users. By sending fake links via calls, SMS and email, it captured users’ login credentials and other personal data. This stolen data was used to unlock stolen smartphones.
Before the network was taken down, it is estimated that more than 2,000 criminals gained access to more than 1,200,000 devices through iServer.
Researchers said iServer is a sophisticated phishing model focused on phone unlocking, differentiating it from standard phishing platforms. Its automated interface made it easy to steal passwords and bypass security locks on compromised devices.
As part of the operation, 17 people were detained in raids in Latin America and Europe. Authorities also seized more than 900 computers and cell phones containing evidence of phishing attacks and stolen data.