Interpol and partners have dismantled the ‘16shop’ phishing-as-a-service platform that sold tools that allowed cybercriminals to conduct phishing attacks aimed at stealing victims’ personal and financial information.

It is estimated that since November 2017 16shop has sold phishing kits designed to steal credentials and payment details from users of popular services such as Apple, PayPal, American Express, and Amazon, to more than 70,000 customers in 43 countries who used the tools in their own scam operations.

The kits were sold at a price ranging from $60 to $150 depending on the targeted brand. It is said that more than 150,000 phishing domains were created using the phishing kits.

According to Interpol, the Indonesian authorities arrested two suspects linked to 16shop, including an alleged platform’s administrator. Another associate was arrested in Japan. Electronic items and several luxury vehicles were also seized.