Global law enforcement seizes 12 domains including Sellix, Cracked and Nulled, €300,000 in cash and cryptocurrencies, and multiple servers in a coordinated raid targeting cybercrime networks.
As reported by Hackread.com on January 29, 2025, a significant international law enforcement operation, dubbed Operation Talent, disrupted two notorious online cybercrime marketplaces, dealing a blow to the facilitators of digital illicit activities.
The operation, involving agencies from the United States, Romania, Australia, France, Germany, Spain, Italy, and Greece, targeted the notorious platforms Cracked and Nulled, which served as central marketplaces for trading stolen credentials, hacking tools, and other cybercrime activities.
Now, the Justice Department’s press release has confirmed the seizure, highlighting the central role of the FBI in the investigation. Working with international partners, the FBI identified the servers hosting these marketplaces and the individuals operating them. In the case of Nulled, the Justice Department unsealed charges against an administrator, Lucas Sohn, for his alleged involvement in the platform’s operations.
Executed between January 28th and 30th, Operation Talent resulted in arresting of two individuals in Spain, searches of seven properties, and the seizure of seventeen servers, more than fifty electronic devices, and approximately 300,000 euros in cash and cryptocurrencies. Twelve domains associated with Cracked and Nulled were seized, effectively shutting down these platforms.
Furthermore, related services, including Sellix, a financial processing service used by Cracked, and StarkRDP, a hosting service promoted on both platforms and operated by the same individuals, were also taken offline.
The scope of the operation is substantial, with Cracked alone boasting over four million users and listing more than 28 million posts advertising cybercrime tools and stolen information. Nulled, had over five million users and listed over 43 million posts advertising similar illicit goods and services.
Beyond mere discussions and knowledge sharing, Cracked and Nulled facilitated a “cybercrime-as-a-service” model where users could acquire stolen data, malicious software, hacking tools, and various other resources necessary to carry out cyberattacks. Investigators estimate that the criminal proceeds generated through these platforms amounted to at least one million euros.
Cracked reportedly generated approximately $4 million in revenue and impacted at least 17 million victims in the United States, according to the Justice Department. One particularly concerning product advertised on Cracked offered access to “billions of leaked websites,” enabling users to search for stolen login credentials.
The Justice Department highlighted a case in the Western District of New York where this tool was allegedly used for cyberstalking and harassment, demonstrating the real-world harm these marketplaces facilitate.
Operating since 2016, Nulled generated approximately $1 million in yearly revenue, offering stolen login credentials, identification documents, and hacking tools. A disturbing example cited by the Justice Department is a product advertised on Nulled that purportedly contained the names and social security numbers of 500,000 American citizens.
The crackdown on Cracked and Nulled marks a significant victory over cybercriminals. Operation Talent’s collaborative nature demonstrates the fruitfulness of international cooperation in combating cybercrime, and their commitment to holding cybercriminals accountable regardless of their location.
