North Macedonian Police Arrest Administrator of OLVX Cybercrime Marketplace
Authorities in North Macedonia charged a 20‑year‑old with running the OLVX marketplace, which sold stolen data and malicious tools, in a joint operation with the FBI.
15 Oct 2026 0 reads Compiled with AI
#North Macedonia #OLVX #FBI #Telegram #ZeroFox #Golema Rečica
A cybercrime marketplace called OLVX operated between 2023 and 2025, offering stolen personal data, login credentials and malicious tools for cyberattacks. The site attracted many criminals, who used it to buy and sell phishing kits and other illicit software. This activity was reported by both CyberScoop and The Record.
The alleged administrator, a 20‑year‑old resident of Golema Rečica near Tetovo, was charged in North Macedonia with computer fraud, misuse of personal data and production and distribution of child sexual abuse material. CyberScoop identified the suspect as “E.A.”, while The Record said the suspect’s name was not released. Both reports said the arrest followed a raid on the individual’s home.
The FBI supplied intelligence to North Macedonian authorities and helped coordinate the operation, marking the first joint cyber‑crime action between the U.S. agency and the Balkan nation. The FBI said the marketplace directly threatened the digital security of thousands of American citizens by selling stolen credentials and other tools.
Evidence seized during the investigation showed the marketplace had generated more than $500,000 in sales, contained a database with over 2,600 customer accounts, and offered more than 1,500 sets of stolen credentials for sale. CyberScoop reported these figures as part of the case documentation.
In addition to the marketplace, the suspect ran a Telegram group named ONEMILI that provided tools for fraudulent refund schemes. The group also allegedly held child sexual abuse material for personal use, a claim made by North Macedonian Interior Ministry officials and reported by The Record.
ZeroFox’s 2023 investigation highlighted the growing popularity of OLVX among cybercriminals, noting its role as a hub for phishing kits, remote‑desktop tools, credentials and stolen data. The report contextualized the platform within a broader trend of takedowns of underground marketplaces by law‑enforcement agencies.