JokerOTP Platform With 28,000+ Phishing Attacks Dismantled

In a major cybersecurity breakthrough, law enforcement agencies from the UK and Netherlands have dismantled the notorious JokerOTP platform, a sophisticated phishing tool responsible for compromising financial accounts totaling £7.5 million across 13 countries.

A 24-year-old man was arrested Tuesday morning (April 22) at a property in Middlesbrough, England, while Dutch authorities simultaneously apprehended a 30-year-old man in the Oost-Brabant region of the Netherlands. 

The suspects reportedly operated online under the aliases “spit” and “defone123”. The arrests come after a meticulous three-year investigation led by Cleveland Police’s Cyber Crime Unit, with crucial support from the North East Regional Organised Crime Unit (NEROCU), National Crime Agency (NCA), Europol, and Dutch National Police.

JokerOTP Platform Used to Bypass 2FA Security

According to authorities, JokerOTP was designed to intercept and exploit one-time passwords (OTPs) and two-factor authentication (2FA) codes, the security measures many financial institutions and online services implement to protect users. 

The fraudulent platform enabled cybercriminals to conduct social engineering attacks by impersonating representatives from trusted organizations like banks or cryptocurrency exchanges.

Fraudsters would make phone calls to victims, claiming to be from legitimate financial institutions. 

Using advanced voice synthesis technology, they would convince victims to provide the one-time verification codes sent to their devices, allowing criminals to bypass security systems and gain unauthorized access to accounts.

During its two-year operational period, the JokerOTP platform was utilized in more than 28,000 phishing attacks across multiple countries. 

When successful, these attacks allowed perpetrators to execute fraudulent bank transactions and drain victims’ accounts.

Action Against JokerOTP Platform

As part of the operation, law enforcement is actively working with hosting companies to dismantle the platform’s infrastructure. 

He underlined the operation’s global scope, saying that the Dutch police, who joined the team in 2024, had given the probe tremendous assistance and knowledge. 

The successful dismantling of the suspected network would not have been possible without this collaboration. This represents the first phase in a broader enforcement action against the wider criminal network of JokerOTP users.

Detective Sergeant Kevin Carter from Cleveland Police’s Cyber Crime Unit described the investigation as “one of the biggest investigations into computer misuse and fraud that the force has worked on.”

“Over a three-year period, the team has been working closely with various law enforcement agencies to establish what activity has taken place, the number of victims believed to have been affected, and the identity of the individuals suspected of being involved,” Carter stated.

The Middlesbrough suspect faces multiple charges, including supplying articles for use in fraud, conspiracy, unauthorized access to computer material, money laundering, and blackmail.

Experts advise users to remain vigilant against OTP-based scams and never share authentication codes with anyone, even individuals claiming to be from trusted organizations.

Are you from the SOC and DFIR Teams? – Analyse Malware Incidents & get live Access with ANY.RUN -> Start Now for Free.

The post JokerOTP Platform With 28,000+ Phishing Attacks Dismantled appeared first on Cyber Security News.