CyberNew CyberNew
Cyber News The Record 2 days ago

North Macedonian police arrest alleged administrator behind OLVX cybercrime market

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Cyber News

Analyst Takeaway

"Image: Kindel Media via Pexels North Macedonian police arrest alleged administrator behind OLVX cybercrime market The administrator behind a cybercriminal marketplace called OLVX was arrested this week in North Macedonia in a joint operation between the Balkan country’s Ministry of Interior and the FBI. The suspect was not named, but the FBI and North Macedonia said a raid on the man’s home in..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
arrest
Image: Kindel Media via Pexels

North Macedonian police arrest alleged administrator behind OLVX cybercrime market

The administrator behind a cybercriminal marketplace called OLVX was arrested this week in North Macedonia in a joint operation between the Balkan country’s Ministry of Interior and the FBI.

The suspect was not named, but the FBI and North Macedonia said a raid on the man’s home in the village of Golema Rečica was conducted after charges were filed.

Since 2023, OLVX has become a popular market where cybercriminals share stolen personal data, login credentials and other tools to help with cybercrime. 

“Active between 2023 and 2025, OLVX is alleged to have unlawfully sold victims’ personally identifiable information and login credentials via over 1,500 seller accounts,” the FBI said in a statement. “The existence of this marketplace directly endangered the digital security of thousands of American citizens who rely on the integrity of accounts they use.”

North Macedonian police said the suspect also ran another group called ONEMILI on Telegram that offered tools for fraudulent refund schemes and other scams. 

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →