The Cracked and Nulled forums, two of the world’s largest cybercrime platforms, have been dismantled in a sweeping international law enforcement operation. These forums, with millions of users, acted as underground marketplaces for stolen credentials, malware distribution, and hacking tools. The takedown, dubbed Operation Talent, was led by the U.S. Department of Justice (DOJ), the Federal Bureau of Investigation (FBI), Europol, and multiple international law enforcement agencies. This marks one of the most significant crackdowns in recent cybercrime history.

Cracked was launched in 2018 and quickly grew into a hub for over 4 million cybercriminals, while Nulled, established in 2016, boasted a staggering 5 million users. These platforms provided a marketplace where cybercriminals could trade stolen login credentials, leaked personal data, and illicit hacking services.

Both forums operated in the shadows, enabling fraudsters to sell illegal goods while ensuring anonymity. However, their widespread use made them prime targets for law enforcement agencies worldwide.

The International Takedown: Operation Talent

Operation Talent was a meticulously planned global effort that combined intelligence gathering, technical forensics, and international cooperation to dismantle Cracked and Nulled forums. By leveraging cyber surveillance and infiltration tactics, law enforcement agencies successfully mapped out the forum’s operators, financial networks, and server locations before executing the takedown.

Key Details of the Seizure

• On January 30, 2025, the U.S. Department of Justice announced the seizure of eight domain names linked to Cracked.
• Authorities also shut down payment processor Sellix, which facilitated illegal transactions on Cracked.
• Two anonymization services, StarkRDP[.]io and rdp[.]sh, used to rent virtual private servers for illegal activities, were also taken down.
• Multiple international agencies, including FBI, Europol, and law enforcement teams from Germany, Australia, Spain, Greece, Romania, Italy, and France, collaborated in the crackdown.

The operation resulted in: 

✔ 17 servers seized across different countries. 

✔ Over €300,000 in cash and cryptocurrencies confiscated. 

✔ Arrests of key individuals running the forums.

The Faces Behind the Forums

While many underground cybercrime platforms remain anonymous, investigations into Cracked and Nulled forums led authorities to two primary individuals responsible for operating these forums.

Key Findings:

• 1337 Services GmbH, an internet service provider registered in Hamburg, Germany, was linked to both forums.
• Corporate records identified Florian Marzahl and Finn Alexander Grimpe as the primary owners.
• Grimpe, also known by the alias “Finndev”, is suspected to be the founder of Nulled.
• Archived forum posts and domain registration data further connect Grimpe to cybercriminal activities.

The Business Behind Cybercrime: E-commerce Platforms

To facilitate illegal transactions, both Cracked and Nulled forums promoted various underground e-commerce platforms:

• Sellix (Shut down) – The primary payment processor for Cracked.
• Shoppy (Still operational) – A platform linked to Nulled that enables cybercriminal transactions.

Although authorities managed to dismantle Cracked’s infrastructure, the continued operation of Shoppy raises concerns about resilient cybercrime networks and the challenges of completely eradicating such platforms.

Impact on the Cybercrime Ecosystem

The global crackdown on Cracked and Nulled forums represents a major victory in the ongoing fight against cybercrime. With over 9 million users combined, these platforms were instrumental in facilitating data breaches, malware distribution, and illegal hacking services. According to Europol, nearly 70% of transactions on these forums involved stolen credentials and financial data, contributing to billions in cyber fraud losses globally. 

The dismantling of these networks not only disrupts the cybercriminal supply chain but also sends a strong message that law enforcement agencies are willing to collaborate across borders to combat digital crime. However, experts warn that similar platforms may emerge in response, requiring continuous surveillance and enforcement action. The battle against cybercrime is far from over, and authorities must remain vigilant to prevent future underground forums from gaining traction.The takedown of Cracked and Nulled forums has sent shockwaves through the cybercriminal community.

✔ Disrupting hacker marketplaces – The closure of these forums has crippled a major supply chain for stolen data and hacking tools. 

✔ Deterring future cybercrime – Publicized arrests serve as a warning to cybercriminals. 

✔ Potential rise of alternatives – Experts predict the emergence of new forums to replace the void left by Cracked and Nulled.

Despite this success, cybercrime continues to evolve, and new platforms will likely emerge to take their place. Authorities will need to continuously monitor dark web forums and underground networks to combat emerging threats.

The Future of Cybercrime Enforcement

Law enforcement agencies worldwide are increasing their focus on disrupting cybercriminal infrastructures before they can regain momentum. The seizure of Cracked and Nulled forums is a major milestone, but continuous efforts are required to dismantle similar cybercrime ecosystems.

Key Takeaways

• Cracked and Nulled forums were leading hubs for cybercriminal activities, with over 9 million total users.
• Operation Talent led to the seizure of domains, arrests of key individuals, and shutdown of payment processors.
• The identities of the operators were exposed, proving that cybercriminals cannot always remain anonymous.
• The persistence of Shoppy and similar platforms suggests that cybercrime networks are adapting.

While law enforcement has dealt a major blow to underground hacking forums, cybercrime remains a persistent threat. Businesses and individuals must: 

✔ Monitor for data breaches and stolen credentials. 

✔ Strengthen cybersecurity measures to prevent unauthorized access. 

✔ Stay informed about emerging cybercrime trends.

To Sum Up

The dismantling of Cracked and Nulled forums marks a pivotal moment in the fight against cybercrime. This takedown has disrupted major underground networks, exposed key operators, and demonstrated the power of international cooperation in curbing illicit online activities. However, the battle is far from over, as cybercriminals continually adapt and migrate to new platforms. Ongoing surveillance and proactive cybersecurity measures will be crucial in ensuring the long-term impact of this operation.

The takedown of Cracked and Nulled forums proves that even the largest cybercrime networks are not invincible. However, as new platforms rise, the battle against cybercriminals is far from over.

Reference

Law enforcement takes down two largest cybercrime forums in the world | Europol

Who’s Behind the Seized Forums ‘Cracked’ & ‘Nulled’? – Krebs on Security