U.S. and Dutch Authorities Dismantle 39 Domains Linked to BEC Fraud Network

Summary: U.S. and Dutch law enforcement agencies dismantled 39 domains linked to a Pakistani group known as Saim Raza, which facilitated online marketplaces for phishing tools and fraud instruments. Known as Operation Heart Blocker, this initiative targeted operations that enabled over million in losses through various business email compromise schemes. The websites also provided instructional materials and training for cybercriminals, expanding the impact of their illegal offerings.

Affected: Saim Raza and associated criminal organizations operating in the U.S. and international cybercrime networks

Keypoints :

• 39 online domains and servers were shut down as part of Operation Heart Blocker on January 29, 2025.
• The criminal group sold phishing toolkits and fraud-enabling tools to transnational crime organizations, leading to over million in losses.
• Instructional content was linked to YouTube videos, making malicious tools accessible to less skilled cybercriminals.
• Users can verify if their credentials were compromised by visiting a designated Dutch police URL.
• The takedown follows a series of law enforcement efforts against various online criminal marketplaces.