Europol and 19 countries' law enforcement agencies have dismantled a major phishing-as-a-service operation, LabHost.

The international effort resulted in 37 arrests, including four key suspects in the UK believed to be the operators.

LabHost, active since 2021, hosted over 40,000 phishing domains and had thousands of users, accruing over $1.17 million.

The service targeted various organizations with customizable phishing templates for commonly used services, including Spotify and banks.

The LabHost takedown signifies a broader strategy to target and disrupt platforms that facilitate transnational cybercriminal activities.