Spanish Authorities Dismantle ‘GXC Team’ Crime-as-a-Service Operation

Spanish authorities have announced the arrest of a 25-year-old Brazilian national, alleged to be the mastermind behind the GXC Team crime-as-a-service operation distributing phishing kits and Android malware. The individual, known as GoogleXcoder, allegedly provided complete phishing services to cybercriminals who sold kits targeting banks and government entities.

The police carried out searches at six locations and arrested GoogleXCoder in San Vicente de la Barquera Cantabria, with six other individuals identified as allegedly associated with the CaaS operation. Investigators seized electronic devices containing source code and financial records, deactivated GoogleXCoder’s Telegram channels, and are examining digital evidence to identify further suspects.

According to Group-IB, Android malware was sold through the GXC Team CaaS, and the operation targeted banks, ecommerce, and transportation organisations in Brazil, Slovakia, Spain, the US, and the UK, with millions of euros in losses reported over the past year.