North Macedonian police, working with the FBI, arrested a man this week accused of administering OLVX, a cybercriminal marketplace that trafficked in stolen personal data and login credentials. The raid targeted the suspect’s home in the village of Golema Rečica after charges were filed, though authorities have not publicly named him.
Active since 2023, OLVX reportedly became a go-to venue for cybercriminals to buy and sell phishing kits, remote desktop access, stolen credentials, and other tools supporting account takeover and fraud. The FBI said the platform operated through more than 1,500 seller accounts and “directly endangered the digital security of thousands of American citizens who rely on the integrity of accounts they use.”
Unlike many underground marketplaces that rely on third-party escrow services, OLVX reportedly let users load cryptocurrency funds directly onto the platform and pay each other from those balances, a structure detailed in a 2023 investigation by cybersecurity firm ZeroFox that first flagged the site’s growing popularity among cybercriminals.
Additional Charges
North Macedonian police said the same suspect also ran a Telegram group called ONEMILI that distributed tools for fraudulent refund schemes and other scams. Investigators further said they found evidence the suspect had acquired and possessed child sexual abuse material for personal use via Telegram, according to North Macedonia’s Interior Ministry.
Part of a Broader Crackdown
The OLVX arrest adds to a string of recent law enforcement actions against cybercriminal infrastructure. Last week, the co-creator of the dark web forum Empire Market was sentenced to 40 years in federal prison. Separately, Microsoft announced the takedown of three Chinese phishing sites this week that had been used to send hundreds of millions of malicious messages impersonating more than 75,000 organizations worldwide.
Law enforcement agencies have dismantled dozens of cybercriminal marketplaces over the past five years, targeting sites that serve as hubs for hackers to exchange stolen data, access tools, and tactics. Security professionals should treat credentials and personal data potentially exposed through such marketplaces as compromised and monitor for related account takeover attempts.