2 Arrested in Crackdown on Nulled and Cracked Hacking Forums

In a significant law enforcement operation, two individuals were arrested, and one alleged administrator was charged in the takedown of the infamous Nulled and Cracked cybercrime forums. These online platforms, which were notorious for enabling illegal activities such as the trafficking of stolen credentials, hacking tools, and illicit hosting services, were targeted as part of a broader crackdown on cybercriminal activity. The operation, named Operation Talent, saw the cooperation of several law enforcement agencies across the globe.

The news of the takedown began circulating earlier this week when visitors to the Nulled, Cracked, and other associated hacking websites were greeted with a message informing them that the sites had been seized by law enforcement. The action was confirmed by Europol and the US Department of Justice on January 30, 2025, marking the culmination of a well-coordinated effort involving law enforcement agencies from multiple countries, including the United States, Australia, France, Spain, Italy, Germany, Greece, and Romania.

The Takedown Operation

The operation, conducted between January 28 and January 30, targeted not only the two main forums, Nulled and Cracked, but also several other cybercrime sites associated with them. In total, over a dozen domains were seized as part of the coordinated action. Europol revealed that two individuals were arrested, and seven properties were searched across various locations. Authorities also seized 17 servers, more than 50 electronic devices, and approximately €300,000 ($310,000) in cash and cryptocurrencies.

The arrest of these individuals, who were allegedly involved in the operation of these illicit forums, is a major blow to the cybercrime ecosystem. Nulled and Cracked had been platforms of choice for cybercriminals involved in a wide range of illegal activities, including identity theft, fraud, and hacking.

The Arrests: Who Were the Suspects?

The two suspects arrested in Spain are believed to be the key figures behind the operation of Nulled and Cracked. According to the Spanish Ministry of Interior, the arrests took place in the city of Valencia. One of the suspects is believed to be Lucas Sohn, a 29-year-old Argentinian national residing in Spain. Sohn, who is charged by the US Department of Justice, is alleged to have been one of the administrators of Nulled, one of the largest hacking forums of its kind. He faces multiple charges, including conspiracy to traffic in passwords, access device fraud, and identity fraud. If convicted, Sohn could face a maximum sentence of 30 years in prison.

The second individual arrested, a woman whose identity has not been disclosed, is thought to have played a significant role in the administration and operation of both Nulled and Cracked.

Nulled and Cracked: A Haven for Cybercriminals

The Nulled and Cracked forums had become central hubs for cybercriminal activity over the years. Nulled, which had been operating since 2016, boasted a massive user base of 5 million members and hosted over 43 million posts. The forum was notorious for offering stolen credentials, hacking tools, and guides on cybercrime, which made it a popular destination for hackers, fraudsters, and other criminals. The forum generated an estimated $1 million in annual revenue and had a substantial impact, with at least 17 million victims in the United States alone.

Similarly, Cracked, which had been around since 2018, catered to a similar audience but on a larger scale. The site had over 4 million users and hosted more than 28 million posts, generating an estimated $4 million in revenue. It provided services related to stolen data, hacking tools, and illicit hosting, and was responsible for affecting a large number of victims worldwide.

Cracked and Nulled were not just forums but complete ecosystems where cybercriminals could buy and sell illegal tools, stolen data, and hacking services. These forums provided an encrypted and somewhat hidden environment for criminals to trade credentials, malicious software, and information related to hacking techniques. The users of these forums often included identity thieves, fraudsters, and ransomware operators who leveraged these platforms to expand their criminal activities.

The Role of Sellix and StarkRDP

One of the key aspects of this operation involved the targeting of Sellix, a financial processor used by both Nulled and Cracked. Sellix allowed cybercriminals to make illegal transactions and conceal the origins of their funds. By disrupting Sellix’s operations, law enforcement has struck a blow to the financial infrastructure that supports online crime.

Another significant target in the operation was StarkRDP, a bulletproof hosting service that had been advertised on both Nulled and Cracked. Bulletproof hosting services provide infrastructure for hosting illegal content while shielding criminals from law enforcement scrutiny. These services are crucial for cybercriminals as they provide anonymity and protection from takedowns, making it more difficult for authorities to shut down malicious websites.

Europol’s involvement in the operation emphasized the international nature of the cybercrime problem and the need for global cooperation to combat it. The fact that law enforcement agencies from the US, Europe, and other countries were involved highlights the transnational impact of these hacking forums and their reach into various parts of the world.

What This Means for Cybercrime and Security

The takedown of Nulled and Cracked is a major victory for law enforcement agencies combating online crime. However, this success does not mark the end of the fight. Cybercriminals will continue to adapt and find new platforms to operate from, as the demand for stolen data, hacking tools, and illegal services remains high.

The operation underscores the need for both technical and legal measures to address cybercrime. As hacking tools and stolen data become increasingly commodified, law enforcement agencies must continue to evolve their strategies to keep up with these rapidly changing environments.

For the general public, the takedown serves as a reminder of the importance of cybersecurity hygiene. Individuals should be vigilant about the security of their personal data and take proactive steps to protect themselves from identity theft, fraud, and other online threats. The rise of cybercrime forums like Nulled and Cracked demonstrates the increasing sophistication of online threats and the need for robust digital security practices.

Looking Ahead: The Future of Cybercrime Takedowns

With the success of Operation Talent, law enforcement agencies around the world have sent a clear message to cybercriminals: there is no safe haven for illegal online activity. As technology continues to evolve, so too will the tactics used by law enforcement to combat cybercrime. This takedown is just one example of how international cooperation, technological innovation, and strong legal frameworks can work together to bring cybercriminals to justice.

As the digital landscape becomes more complex, the fight against cybercrime will require a concerted effort from all sectors of society. It’s clear that cybercriminals will continue to target vulnerabilities in digital systems, but with ongoing collaboration between governments, tech companies, and law enforcement, there is hope that these criminal networks can be disrupted, and online safety can be enhanced for everyone.