inp.polri.go.id - Jakarta. The Indonesian National Police (INP) Cyber Crime Directorate has uncovered an international network selling phishing tools used to support cybercrime activities involving illegal access. In this case, two suspects, identified as GWL and FYT, were apprehended, along with evidence and assets worth IDR 4.5 billion.
The Director of Cyber Crime at INP, Brigadier General Himawan Bayu Aji, explained that the case began with the discovery of a wellstore website suspected of selling software for phishing activities.
"The wellstore website is suspected of trading scripts or phishing tools, software designed to facilitate illegal access. From our investigation, investigators discovered a link to a Telegram messaging app account that used a bot as a communication medium for buying and selling scripts and sending them," said Himawan.
According to him, suspect GWL had been producing and refining phishing tools since 2017, before beginning to sell and distribute them in 2018 through several websites.
"To sell the tools, suspect GWL created the websites wellstore.com in 2018, wellstore, and wellsoft in 2020. These three websites are connected to Telegram accounts as a means of communication and sending scripts to buyers," he explained.
Meanwhile, Inspector General Nunung Syaifuddin, Vice Chief of the Criminal Investigation Unit of the Indonesian National Police, explained that the case was uncovered through cyber patrols conducted by the Criminal Investigation Unit's Cyber Crime Directorate.
"This case was successfully uncovered after a cyber patrol discovered a wellstore website selling phishing tools. During the investigation, investigators conducted undercover purchases using crypto assets and determined that the software was used for phishing activities or illegal access," said Nunung.
From the investigation, investigators successfully dismantled an international phishing tool sales network with a very large number of buyers and victims.
"In this disclosure, investigators successfully uncovered an international phishing tool sales network. Investigators also identified 2,440 buyers between 2019 and 2024, as well as 34,000 victims globally. Furthermore, two suspects, identified as GWL and FYT, were apprehended in Kupang City, East Nusa Tenggara, and have been named as suspects," he explained.
Nunung added that the two suspects have been detained at the INP Criminal Investigation Agency detention center since April 9, 2026. Investigators also confiscated assets worth billions of rupiah, the proceeds of crime.
He further emphasized that the disclosure of this case demonstrates INP's commitment to maintaining digital security and strengthening international cooperation in eradicating cybercrime.
This case marks one of the major revelations by INP in uncovering the transnational digital crime ecosystem. Going forward, INP affirmed that they will continue to boost cyber patrols and law enforcement to protect the public from increasingly complex cybercrime threats.
(ad/ta/pr/rs)
