Cyber Security News

JokerOTP Platform Linked to 28,000+ Phishing Attacks Dismantled

Law enforcement agencies from the UK and the Netherlands have dismantled the notorious JokerOTP cybercrime platform, which is allegedly linked to more than 28,000 phishing attacks across 13 countries.

A 24-year-old man was apprehended this morning by Cleveland Police at a residence in Middlesbrough, England.

He is currently being held in police custody on suspicion of a slew of serious offenses, including supplying articles for use in fraud, conspiracy to supply articles for use in fraud, multiple counts of fraud by false representation, unauthorized access to computer material, money laundering, and blackmail.

Simultaneously, a 30-year-old man was arrested by Dutch National Police in the Oost-Brabant region.

Law enforcement sources say these synchronized arrests mark the culmination of a three-year, cross-border investigation led by Cleveland Police’s Cyber Crime Unit, with crucial support from the North East Regional Organised Crime Unit (NEROCU), the National Crime Agency (NCA), Europol, and the Dutch National Police.

27,800+ Victims and £7.5 Million in Losses

Authorities allege that over two years, the JokerOTP platform was used to trick thousands of victims into revealing authentication codes and sensitive personal information, facilitating fraudulent bank transactions and compromising financial accounts.

The reported financial losses linked to these activities total an estimated £7.5 million.

Detective Sergeant Kevin Carter, who leads the Cyber Crime Unit at Cleveland Police, described the operation as one of the largest in the force’s history.

Carter highlighted the painstaking work involved: “Over three years, the team has been working closely with various law enforcement agencies to establish what activity has taken place, the number of victims believed to have been affected, and the identity of the individuals suspected of being involved.”

Today’s operation also saw law enforcement collaborating with international hosting companies to dismantle the JokerOTP platform crucial first step in broader enforcement against its user base.

“Users of the JokerOTP bot platform can rest assured that law enforcement has been watching and will be in touch,” warned Detective Sergeant Carter, signaling potential legal consequences for individuals who utilized the service.

Dutch police joined the investigation in 2024, bringing vital expertise that helped bring down what authorities describe as a sophisticated and far-reaching cybercrime network.

Carter praised the cross-border effort, saying, “Our collaborative efforts with international partners demonstrate that we can, and will, track down individuals who we believe to be exploiting technology for criminal gain.”

As the investigation continues, authorities urge victims and potential users of such platforms to come forward and assist with inquiries, underscoring that cybercriminals are not beyond the reach of the law.

Find this News Interesting! Follow us on Google News, LinkedIn, & X to Get Instant Updates!

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

2 days ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

2 days ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

2 days ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

2 days ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

2 days ago