MACC joins international operation to dismantle LeakBase cybercrime forum

KUALA LUMPUR: The Malaysian Anti-Corruption Commission (MACC), along with the law enforcement authorities from 14 countries, successfully carried out coordinated enforcement actions targeting individuals linked to the cybercrime data-leak forum known as LeakBase.

The MACC said it participated in the international operation alongside major enforcement agencies including the Federal Bureau of Investigation (FBI), US Department of Justice (DOJ), National Crime Agency (United Kingdom), Kosovo Police, Police Scotland, Polícia Judiciária (Portugal), Australian Federal Police, Federal Criminal Police Office (Germany), Policía Nacional (Spain), Federal Police (Belgium), and the Central Cybercrime Bureau (Poland) on March 3.

“The operation, which involved arrests, house searches and ‘knock-and-talk’ interventions across multiple jurisdictions, was hosted and facilitated by Europol at its headquarters in The Hague.

“It brought together international partners to successfully dismantle the cybercrime infrastructure linked to LeakBase and disrupt its global network of users,” the commission said in a statement on Friday (March 6).

As part of the operation, MACC’s Special Operations division executed a search warrant at a web-hosting solutions company located in Kuala Lumpur.

“Cyber forensic examinations confirmed that the LeakBase forum was actively operating through servers hosted at the facility, leading to the seizure of digital evidence and the shutdown of the forum’s domain.

“The LeakBase forum, which had been active since 2021, served as an online marketplace for stolen data used in cybercrime activities.

“Investigations revealed that the platform contained large volumes of compromised account credentials, including email and password combinations frequently used for account takeovers, fraud and other illicit online activities,” it said

The MACC said the forum had amassed more than 142,000 registered members and over 215,000 messages, with an extensive archive of hacked databases originating from numerous high-profile cyber breaches.

Users were able to trade stolen information, including credit and debit card numbers, banking details, usernames, passwords and other sensitive personal and corporate data.

“Our involvement in this operation reflects Malaysia’s continued commitment to strengthening international law enforcement cooperation in combating cybercrime and cross-border misuse of data.

“We will continue working closely with global enforcement partners to safeguard digital ecosystems and uphold the integrity of financial and information systems,” the commission said.