The US seized the malicious website “PopeyeTools” and charged three of its administrators, Abdul Ghaffar, Abdul Sami and Javed Mirza, with selling stolen data.

In addition to seizing several domains, authorities have also seized $283,000 worth of cryptocurrencies linked to illegal operations.
PopeyeTools was a marketplace used by cybercriminals to buy and sell stolen financial and personal data, while also offering tools for conducting fraud and cyberattacks.
See also: Dstat.cc: DDoS platform seized – Two arrested
It began operations in 2016 and served as a hub for thousands of users around the world, including those involved in ransomware activities and other cybercrimes.
Authorities estimate that PopeyeTools generated $1.7 million in revenue through the sale of personal and financial information of at least 227,000 people.
More specifically, the malicious website provided the following services:
- Payment card and personal data packages.
- Stolen bank account details for fraudulent access.
- Spam email lists for phishing or marketing scams.
- Website templates used in scams.
- Educational materials on committing financial fraud and other cybercrimes.
Tools for verifying the validity of stolen credit and debit card data.
See also: Police seize infostealer operation Redline and Meta
The platform also offered refund and replacement policies for purchased data (although these features probably didn't work).
Authorities announced the seizure of the domains PopeyeTools.com, PopeyeTools.uk and PopeyeTools.to (the latter hosting the malicious platform).
Visitors to these URLs will now see a bannerwarning that information about the platform's members is in the hands of law enforcement.
Charges against administrators
The three suspected administrators, Abdul Ghaffar, 25, from Pakistan, Abdul Sami, 35, from Pakistan, and Javed Mirza, 37, from Afghanistan, are accused of operating PopeyeTools.
See also: South Korea: 215 people arrested for crypto investment fraud

The operation by the authorities is very important and represents an important step in the fight against cybercrime. By seizing the infrastructure of the PopeyeTools marketplace, it demonstrates the determination and ability of the authorities to deal with such threats.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
This operation also helps raise awareness about cybersecurity. The successful handling of PopeyeTools highlights the importance of protecting digital infrastructure and protecting personal data.
Furthermore, the business can act as a deterrent to cybercriminals. The exposure and suppression of such activities can discourage others who may be considering similar actions.
Finally, public trust in authorities is strengthened. This is crucial for strengthening overall cybersecurity.
Source: www.bleepingcomputer.com
