Spanish Guardia Civil dismantles GXC Team and arrests GoogleXcoder
Law Enforcement
Summary
Hide ▲
Show ▼
Spanish Guardia Civil arrested the alleged leader of GXC Team, a Crime-as-a-Service operation that sold phishing kits, Android malware, and AI-based tools to cybercriminals worldwide. The case involves a 25-year-old Brazilian national known as GoogleXcoder, who was detained in San Vicente de la Barquera, Cantabria, after a year-long investigation and six coordinated raids across Spain. Authorities say the network operated since 2023 and was used against banks, transportation firms, and e-commerce platforms in Spain, Brazil, Slovakia, the UK, and the US. Investigators seized source code, client communications, and cryptocurrency records, and they identified six suspected accomplices while continuing to disable the group’s online infrastructure.
Related Happenings
Interpol Operation Ramz cybercrime crackdown in MENA
Law Enforcement
First: 18.05.2026 17:00
Last: 18.05.2026 17:00
Sources 1
About this happening:
**INTERPOL**'s **Operation Ramz** led to **more than 200 arrests** across the **Middle East and North Africa**, with law enforcement also identifying **382 additional suspects** i...
Interpol Operation Ramz cybercrime crackdown in MENA
Law EnforcementAbout this happening: **INTERPOL**'s **Operation Ramz** led to **more than 200 arrests** across the **Middle East and North Africa**, with law enforcement also identifying **382 additional suspects** i...
Tyler Robert Buchanan guilty plea in Scattered Spider crypto-theft case
Law Enforcement
First: 20.04.2026 16:33
Last: 20.04.2026 16:33
Sources 1
About this happening:
**Tyler Robert Buchanan** **pleaded guilty** in the **United States** in a **Scattered Spider** cybercrime case, increasing his criminal exposure for **wire fraud** and **aggravat...
Tyler Robert Buchanan guilty plea in Scattered Spider crypto-theft case
Law EnforcementAbout this happening: **Tyler Robert Buchanan** **pleaded guilty** in the **United States** in a **Scattered Spider** cybercrime case, increasing his criminal exposure for **wire fraud** and **aggravat...
Scattered Spider SMS phishing and SIM-swap crypto theft campaign
Campaign
First: 20.04.2026 16:33
Last: 20.04.2026 16:33
Sources 1
About this happening:
The **Scattered Spider** campaign used **SMS phishing** and **SIM swap** attacks to steal employee credentials, hijack phone numbers, and take over email and **virtual currency wa...
Scattered Spider SMS phishing and SIM-swap crypto theft campaign
CampaignAbout this happening: The **Scattered Spider** campaign used **SMS phishing** and **SIM swap** attacks to steal employee credentials, hijack phone numbers, and take over email and **virtual currency wa...
Interpol-led Operation Synergia III cybercrime takedown
Law Enforcement
First: 13.03.2026 18:15
Last: 13.03.2026 18:15
Sources 1
About this happening:
**Interpol** coordinated **Operation Synergia III**, and the **94 arrests** plus infrastructure seizures materially disrupted a cross-border **phishing** and **ransomware** case n...
Interpol-led Operation Synergia III cybercrime takedown
Law EnforcementAbout this happening: **Interpol** coordinated **Operation Synergia III**, and the **94 arrests** plus infrastructure seizures materially disrupted a cross-border **phishing** and **ransomware** case n...
John Daghita arrest in Saint Martin USMS crypto-theft case
Law Enforcement
First: 05.03.2026 20:36
Last: 05.03.2026 20:36
Sources 1
About this happening:
**John Daghita** was **arrested on Saint Martin** in a **joint FBI/French Gendarmerie operation**, escalating a cybercrime case tied to an alleged **$46 million cryptocurrency the...
John Daghita arrest in Saint Martin USMS crypto-theft case
Law EnforcementAbout this happening: **John Daghita** was **arrested on Saint Martin** in a **joint FBI/French Gendarmerie operation**, escalating a cybercrime case tied to an alleged **$46 million cryptocurrency the...
Timeline
-
11.10.2025 17:17 3 articles · 7mo ago
Spanish Guardia Civil dismantles GXC Team and arrests GoogleXcoder
Initial DisclosureOn **May 20**, coordinated raids across multiple Spanish cities seized devices, source code, communications, and financial records tied to the **GXC Team** network.
Show sources
- Spain dismantles “GXC Team” cybercrime syndicate, arrests leader — www.bleepingcomputer.com — 11.10.2025 17:17
- Spain dismantles “GXC Team” cybercrime syndicate, arrests leader — www.bleepingcomputer.com — 11.10.2025 17:17
- Spain Arrests Alleged Leader of GXC Team Cybercrime Network — www.infosecurity-magazine.com — 13.10.2025 18:00