Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

UK Student Sentenced to Prison for Selling Phishing Kits

Ollie Holman was sentenced to prison for selling over 1,000 phishing kits that caused estimated losses of over $134 million.

Hacker sentenced to prison

A British student was sentenced to seven years in prison for selling more than 1,000 phishing kits impersonating legitimate entities in 24 countries.

The individual, Ollie Holman, 21, of Eastcote, West London, was initially arrested in October 2023, and then again in May 2024. On both occasions, law enforcement seized devices containing digital evidence liking him to his online activities.

Holman, who pleaded guilty to seven counts, admitted to selling phishing kits containing fraudulent web pages that tricked victims into sharing their personal and financial information with cybercriminals.

According to UK law enforcement, Holman built and sold 1,052 phishing kits that targeted 69 financial institutions and large organizations, including charities, causing more than £100 million (approximately $134 million) in losses, globally.

Scripts within the fraudulent web pages collected the user-supplied information, including login credentials and banking information.

Holman sold the phishing kits over Telegram, and provided cybercriminals with advice and technical assistance in committing fraud. Authorities say that, even after he was arrested in 2023, he continued to provide support for the phishing kits through his Telegram channel.

Advertisement. Scroll to continue reading.

Following the sentencing, authorities will take Holman back to court to pursue the confiscation of the illegal proceeds.

“By creating and selling phishing kits, Ollie Holman facilitated a widespread fraud which others used to exploit innocent victims on a vast scale,” Crown Prosecution Service specialist prosecutor Sarah Jennings said.

“I hope this case sends a clear message to those who intend on committing fraud: no matter how sophisticated your methods, you cannot hide behind online anonymity or encrypted platforms. Fraudsters like Holman will be robustly pursued by law enforcement, prosecuted by the CPS, and brought to justice,” Jennings added.

Related: US Targets North Korea’s Illicit Funds: $15M Rewards Offered as American Woman Jailed in IT Worker Scam

Related: Nigerian Involved in Hacking US Tax Preparation Firms Sentenced to Prison

Related: Trump Pardons Founder of Silk Road Website

Related: Notorious Vietnamese Hacker Turns Government Cyber Agent

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

In cyber-physical systems (CPS), just one hour of downtime can outweigh an entire annual security budget. Learn how to master the Return on Security Investment (ROSI) to align security goals with the bottom-line priorities.

Register

Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.

Register

People on the Move

Malwarebytes has named Chung Ip as Chief Financial Officer.

Semperis has appointed John Podboy as Chief Information Security Officer.

Randy Menon has become Chief Product and Marketing Officer at One Identity.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.