Dutch Police Arrest Two Suspects Linked to Fraud Family Phishing Service
Summary
A Group-IB investigation with Dutch police identified two people behind Fraud Family, a phishing-as-a-service operation targeting Dutch and Belgian residents. Police arrested the suspects and warned buyers of the group’s tools.
Key points
- Fraud Family operated a phishing-as-a-service network targeting people in the Netherlands and Belgium since 2020.
- The syndicate promoted phishing frameworks and ready-to-use infrastructure through Telegram channels with nearly 2,000 subscribers.
- Its phishing pages impersonated local financial organizations and marketplaces to steal personal and banking information.
- Scams used email, SMS, or WhatsApp messages to direct victims to malicious links and fake payment or banking pages.
- Group-IB shared investigation findings with Dutch police and notified impersonated organizations.
- Police arrested a 24-year-old man and a 15-year-old accomplice, identified as the suspected developer and seller of the frameworks.
- After the operation, police warned buyers of the tools that their identities and activities were under investigation.
Article Details
- Event Type
- Law-enforcement operation against a phishing-as-a-service syndicate, resulting in the arrest of two suspects and disruption of its operations.
- Impact
- The Dutch Police arrested two suspects identified as the alleged developer and seller of the phishing frameworks. The operation disrupted the Fraud Family’s phishing infrastructure, reduced the number of fraudsters using its services, and led to notifications to impersonated organizations.
MITRE ATT&CK
People
Threat Actors
Vendors
Products
TelegramOperating predominantly in Dutch-speaking regions, the Fraud Family operated by offering phishing frameworks through the Fraud-as-a-Service (FaaS) model on a network of Telegram channels with 2,000 subscribers.WhatsAppthe target’s personal and banking information using common attack vectors such as email, SMS, or WhatsApp messages.