Investigators in 19 countries have taken down one of the world's largest phishing platforms, according to the EU law enforcement agency Europol on Thursday.
Police arrested 37 suspects, including four alleged masterminds of the LabHost platform based in the United Kingdom, according to Europol.
The agency said that the LabHost platform offered fake websites and software for cyber criminals.
According to Europol, around 10,000 suspects had used the services of LabHost, which led to data thefts of around 480,000 credit cards and almost 1.2 million passwords worldwide.
The lead investigators in London suspect that the number of victims is far higher, as not all data has yet been analysed.
The platform offered its services for around $300 per month.
Even inexperienced hackers were able to use fake websites, mainly from banks, postal services and telecom companies, to send e-mails to potential victims asking them to log in to the fake websites using the corresponding links.
Entering login information through the links would disclose PIN codes, passwords and other details to the criminals. The schemes also sometimes directly involved money transfers.
According to Europol, criminals were able to choose from 170 websites or have them built to order by the platform.
Police searched a total of 70 buildings between Sunday and Wednesday during the course of the operation, which was led by police in London.