Authorities in North Macedonia have arrested the alleged administrator of OLVX, an online marketplace linked to the sale of stolen personal information and tools used for cybercrime. The arrest followed a joint operation involving the country’s Ministry of Interior and the FBI.
The suspect’s identity has not been disclosed. Authorities said they raided his home in the village of Golema Rečica after charges were filed.
OLVX reportedly operated between 2023 and 2025, allowing cybercriminals to trade personal data, login credentials and other tools. According to the FBI, the marketplace allegedly sold victims’ personally identifiable information and login details through more than 1,500 seller accounts.
“Active between 2023 and 2025, OLVX is alleged to have unlawfully sold victims’ personally identifiable information and login credentials via over 1,500 seller accounts,” the FBI said in a statement. “The existence of this marketplace directly endangered the digital security of thousands of American citizens who rely on the integrity of accounts they use.”
North Macedonian police also linked the suspect to a Telegram group called ONEMILI, which allegedly offered tools for fraudulent refund schemes and other scams.
“Additionally, evidence was obtained indicating that the suspect had acquired and possessed child sexual abuse material (CSAM) for personal use through the Telegram application,” the country’s Interior Ministry said.
A cybersecurity firm investigated OLVX in 2023 and warned that it was gaining popularity among cybercriminals selling phishing kits, remote desktop access, credentials, stolen data and other tools.
Unlike many underground marketplaces, OLVX reportedly did not use an escrow service. Instead, users deposited cryptocurrency into the platform and used those funds to pay other users.
Law enforcement agencies have dismantled dozens of cybercrime marketplaces over the past 5 years. Last week, the co-creator of the dark web forum Empire Market was sentenced to 40 years in federal prison.
Separately, Microsoft announced on Wednesday that it had disrupted 3 Chinese phishing websites allegedly used to send hundreds of millions of malicious messages impersonating more than 75,000 organisations worldwide.
Also read: Viksit Workforce for a Viksit Bharat
Do Follow: The Mainstream LinkedIn | The Mainstream Facebook | The Mainstream Youtube | The Mainstream Twitter
About us:
The Mainstream is a premier platform delivering the latest updates and informed perspectives across the technology business and cyber landscape. Built on research-driven, thought leadership and original intellectual property, The Mainstream also curates summits & conferences that convene decision makers to explore how technology reshapes industries and leadership. With a growing presence in India and globally across the Middle East, Africa, ASEAN, the USA, the UK and Australia, The Mainstream carries a vision to bring the latest happenings and insights to 8.2 billion people and to place technology at the centre of conversation for leaders navigating the future.