Law enforcement agencies from around the world have taken down two major hacking forums, Cracked and Nulled, disrupting a key part of the cybercrime network.
These platforms, boasting a combined user base exceeding 10 million, were notorious hubs for illicit activities, including the sale of stolen data, distribution of malware, and facilitation of cybercrime services. The coordinated operation, known as Operation Talent, led to the arrest of two individuals in Valencia, Spain, and the seizure of 17 servers, over 50 electronic devices, and approximately €300,000 in cash and cryptocurrencies.
Cracked, operational since March 2018, had over four million users and hosted more than 28 million posts, generating approximately $4 million in revenue. Nulled, active since 2016, boasted over five million users and 43 million posts, with an estimated annual revenue of $1 million.
Both forums served as one-stop shops for cybercriminals, offering a marketplace for illegal goods and services, including stolen credentials, hacking tools, and cybercrime-as-a-service offerings.
Why It Matters: These forums were instrumental in lowering the barrier to entry for cybercriminals by providing easy access to sophisticated hacking tools and services. Their removal disrupts a significant supply chain of illicit resources, potentially reducing the frequency and sophistication of cyberattacks across the globe. However, it also underscores the persistent nature of cyber threats, emphasizing the need for organizations to remain proactive in their cybersecurity strategies.
- Operation Talent’s Success: Led by German authorities and coordinated by Europol, Operation Talent resulted in the arrest of two suspects in Valencia, Spain, and the seizure of 17 servers, over 50 electronic devices, and approximately €300,000 in cash and cryptocurrencies. Additionally, 12 associated domains were taken down, and related services like Sellix and StarkRDP were disrupted.
- Scale of the Dismantled Forums: Cracked had over four million users and hosted more than 28 million posts, generating approximately $4 million in revenue. Nulled boasted over five million users and 43 million posts, with an estimated annual revenue of $1 million. Both forums were central hubs for cybercriminal activities.
- Illicit Activities Facilitated: The forums offered a marketplace for illegal goods and services, including stolen credentials, hacking tools, and cybercrime-as-a-service offerings. They also provided AI-based tools and scripts to scan for security vulnerabilities and optimize attacks, as well as “configs” used by credential-stuffing attack tools like OpenBullet and SilverBullet.
- International Collaboration: The operation involved law enforcement agencies from the United States, Australia, France, Spain, Italy, Germany, Greece, and Romania, highlighting the global effort required to combat cybercrime effectively. This collaboration underscores the importance of international partnerships in addressing the complex and borderless nature of cyber threats.
2 Arrested in Takedown of Nulled, Cracked Hacking Forums – SecurityWeek