In a significant cybersecurity operation, US and Dutch authorities have successfully seized 39 domains and servers belonging to the HeartSender phishing organization based in Pakistan. The group, also known as Saim Raza and Manipulators Team, has been a prominent player in cybercrime for over a decade.

The Operation

Dubbed ‘Operation Heart Blocker,’ the joint investigation began in late 2022 by the East Brabant police unit’s Cybercrime Team in the Netherlands. The operation targeted a sophisticated criminal enterprise that sold various cybercrime tools, including phishing kits, malware, and spamming services to organized crime groups.

Impact and Damages

– Over $3 million in losses reported in the US alone
– Millions of victims affected worldwide
– Multiple branded shops operated across numerous domains
– Extensive YouTube presence for promotional activities

Criminal Activities

HeartSender provided:
– Malicious tools advertised as “fully undetectable”
– Training materials through YouTube videos
– Tools for business email compromise schemes
– Credential theft capabilities

Victim Support

The Dutch police have implemented a web-based tool allowing individuals to check if their data was compromised in the HeartSender datasets. Affected users receive email notifications with security guidance and next steps.

This operation coincides with “Operation Talent,” which resulted in the shutdown of major hacking forums Cracked and Nulled, affecting over 10 million users and leading to multiple arrests and domain seizures.