Authorities Take Down Cracked & Nulled Hacking Forums Used by 10 Million Users

In a law enforcement operation dubbed “Operation Talent,” an international coalition of law enforcement agencies led by Germany’s Bundeskriminalamt (BKA) and Europol has dismantled two of the world’s largest cybercrime forums: Cracked.io and Nulled.to.

These platforms, which collectively hosted over 10 million users, served as hubs for illicit activities, including selling stolen data, malware, hacking tools, and offering cybercrime-as-a-service (CaaS). The takedown marks a significant blow to the global cybercrime ecosystem.

The Role of Cracked.io and Nulled.to in Cybercrime

Cracked.io and Nulled.to were not just forums for discussion but full-fledged marketplaces for cybercriminals. They offered a range of illegal goods and services:

• Stolen data: Both platforms hosted “combo lists” containing stolen credentials for use in credential-stuffing attacks.
• Hacking tools: Advanced scripts like OpenBullet and SilverBullet were sold to automate attacks.
• AI-powered tools: These included phishing kits capable of generating highly personalized scam messages.
• Cybercrime-as-a-Service (CaaS): This model allowed even unskilled individuals to purchase ready-to-use malware or rent botnets for attacks.

The platforms also provided tutorials on hacking techniques and shared information about security vulnerabilities. Europol estimates the operators of these forums generated at least €1 million in criminal profits.

Collect Threat Intelligence with TI Lookup to Improve Your Company’s Security - Get 50 Free Request

Key Developments in the Operation

The coordinated effort, executed between January 28 and January 30, 2025, involved law enforcement from eight countries, including the United States, Australia, France, Greece, Italy, Romania, and Spain. The operation resulted in:

• Two arrests: A German citizen residing in Germany and another in Spain were detained. Both face charges under Section 127 of the German Criminal Code for operating illegal trading platforms.
• Seizures: Authorities confiscated 17 servers, over 50 electronic devices, and approximately €300,000 in cash and cryptocurrency.
• Domain takedowns: Twelve domains associated with Cracked.io and Nulled.to were seized. The FBI redirected these domains to servers displaying seizure banners.
• Additional services disrupted: Sellix, a financial processor used by Cracked.io, and StarkRDP, a hosting service promoted on both forums, were also dismantled.

The takedown highlights the rising trend of CaaS—an organized crime model where cybercriminals offer hacking tools and services on a subscription or pay-per-use basis. 

This model has democratized cybercrime by lowering technical barriers. Services offered under CaaS include:

• Ransomware-as-a-Service (RaaS): Pre-packaged ransomware kits sold to affiliates who share profits with developers.
• Phishing-as-a-Service (PhaaS): Ready-made phishing campaigns targeting specific individuals or organizations.
• Botnet rentals: Networks of compromised devices available for distributed denial-of-service (DDoS) attacks.

By dismantling Cracked.io and Nulled.to, authorities have disrupted a significant supply chain of illicit tools and services. While this takedown is a victory against cybercrime, it also serves as a reminder that the fight is far from over.

Find this story interesting! Follow us on Google News, LinkedIn, and X for more instant updates.

The post Authorities Take Down Cracked & Nulled Hacking Forums Used by 10 Million Users appeared first on Cyber Security News.