Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

GXC Team CaaS phishing ecosystem disrupted after global banking-fraud tool sales

Threat Actor Meta
First reported
Last updated
Happening score
H score 31
1 unique sources, 1 articles

Summary

Hide ▲

The arrest of the alleged leader disrupted GXC Team's Crime-as-a-Service phishing ecosystem, cutting off turnkey tooling used for banking fraud by criminal customers worldwide. The group sold customized phishing kits, an Android Trojan, and AI-based voice-scam tools through Telegram channels and underground forums. Its services were linked to attacks on banks, transportation firms, and e-commerce platforms across Spain, Brazil, Slovakia, the UK, and the US.

Related Happenings

FIFA-themed phishing-as-a-service market selling scam kits and ticket-buying bots

Threat Actor Meta
H score42 First: 05.06.2026 10:01 Last: 05.06.2026 10:01 Sources 1

About this happening: A **FIFA-themed phishing-as-a-service market** is selling **ready-made scam kits** and **ticket-buying bots**, lowering the barrier for fraud operators and making takedowns less e...

Open Happening

FBI public service announcement on fake FIFA websites

Public Sector Action
H score21 First: 28.05.2026 22:08 Last: 28.05.2026 22:08 Sources 1

About this happening: The **FBI** and security researchers warn that **FIFA-themed fraud** is already targeting **World Cup 2026** fans ahead of the **June 11 kickoff**. Reported activity includes **mo...

Open Happening

Ghost Stadium FIFA World Cup fraud campaign

Campaign
H score41 First: 27.05.2026 14:28 Last: 27.05.2026 14:28 Sources 1

About this happening: A **Ghost Stadium**-linked **FIFA impersonation fraud campaign** is targeting **2026 FIFA World Cup** fans with cloned **fifa.com** pages, fake ticket and hospitality offers, and...

Open Happening

European Council sanctions Emennet Pasargad over cyber-enabled activity

Regulatory/Legal Action
H score21 First: 26.05.2026 18:48 Last: 26.05.2026 18:48 Sources 1

About this happening: The **European Council** imposed **sanctions** on Iranian company **Emennet Pasargad**, escalating legal pressure over alleged **hacking** and **disinformation** activity. The act...

Open Happening

Formula 1 fan scam ecosystem campaign

Campaign
H score34 First: 25.05.2026 12:00 Last: 25.05.2026 12:00 Sources 1

About this happening: A coordinated scam ecosystem is targeting **Formula 1 fans** with **fake streaming apps**, **counterfeit merchandise**, and **social-media lures**, creating theft, fraud, and malw...

Open Happening

Timeline

  1. 13.10.2025 18:00 2 articles · 8mo ago

    Spanish authorities arrest alleged GXC Team leader

    Legal Policy Action Update

    Spanish authorities arrested a 25-year-old Brazilian national alleged to lead GXC Team, a Crime-as-a-Service operation that sold phishing kits, Android malware, and AI-based tools through Telegram channels and underground forums. The Guardia Civil said the suspect, known online as GoogleXcoder, was detained in San Vicente de la Barquera, Cantabria, after a year-long investigation with six coordinated raids across Spain, while investigators seized electronic devices containing source code, client communications, and cryptocurrency records and began disabling the group's online infrastructure. Authorities said the tools were used in attacks targeting banks, transportation firms, and e-commerce platforms in Spain, Brazil, Slovakia, the UK, and the US.

    Show sources
    Open in new tab