Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

UK Student Sentenced to Prison for Selling Phishing Kits

Ollie Holman was sentenced to prison for selling over 1,000 phishing kits that caused estimated losses of over $134 million.

Hacker sentenced to prison

A British student was sentenced to seven years in prison for selling more than 1,000 phishing kits impersonating legitimate entities in 24 countries.

The individual, Ollie Holman, 21, of Eastcote, West London, was initially arrested in October 2023, and then again in May 2024. On both occasions, law enforcement seized devices containing digital evidence liking him to his online activities.

Holman, who pleaded guilty to seven counts, admitted to selling phishing kits containing fraudulent web pages that tricked victims into sharing their personal and financial information with cybercriminals.

According to UK law enforcement, Holman built and sold 1,052 phishing kits that targeted 69 financial institutions and large organizations, including charities, causing more than £100 million (approximately $134 million) in losses, globally.

Scripts within the fraudulent web pages collected the user-supplied information, including login credentials and banking information.

Holman sold the phishing kits over Telegram, and provided cybercriminals with advice and technical assistance in committing fraud. Authorities say that, even after he was arrested in 2023, he continued to provide support for the phishing kits through his Telegram channel.

Advertisement. Scroll to continue reading.

Following the sentencing, authorities will take Holman back to court to pursue the confiscation of the illegal proceeds.

“By creating and selling phishing kits, Ollie Holman facilitated a widespread fraud which others used to exploit innocent victims on a vast scale,” Crown Prosecution Service specialist prosecutor Sarah Jennings said.

“I hope this case sends a clear message to those who intend on committing fraud: no matter how sophisticated your methods, you cannot hide behind online anonymity or encrypted platforms. Fraudsters like Holman will be robustly pursued by law enforcement, prosecuted by the CPS, and brought to justice,” Jennings added.

Related: US Targets North Korea’s Illicit Funds: $15M Rewards Offered as American Woman Jailed in IT Worker Scam

Related: Nigerian Involved in Hacking US Tax Preparation Firms Sentenced to Prison

Related: Trump Pardons Founder of Silk Road Website

Related: Notorious Vietnamese Hacker Turns Government Cyber Agent

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.

Register

This year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.

Register

People on the Move

Mark Carter has been appointed Chief Information Security Officer at Socure.

Spektrum Labs has named Mark Cravotta Chief Operating Officer.

Philip Martin has joined Uber as Chief Information Security Officer.

More People On The Move

Expert Insights

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.