Operation TALENT - Tracking the Hackers
![[Image: GjN7W5qXEAA9qY-.jpg]](https://external-content.duckduckgo.com/iu/?u=https://pbs.twimg.com/media/GjN7W5qXEAA9qY-.jpg)
On January 29th, Operation Talent dismantled the cybercrime forums Cracked and Nulled, led by two young individuals and used by millions.
@CrackedTo is the official X account of the forum. The associated email, olivia.messla@outlook.de, was revealed in the 2023 Twitter breach.
![[Image: GjN_UwQWcAAkvOv.jpg]](https://external-content.duckduckgo.com/iu/?u=https://pbs.twimg.com/media/GjN_UwQWcAAkvOv.jpg)
- Nulled: TestingRain, Infinity, FloraiN
- RaidForums: FloraiN
![[Image: GjN_-6FWIAAMkDG.jpg]](https://external-content.duckduckgo.com/iu/?u=https://pbs.twimg.com/media/GjN_-6FWIAAMkDG.jpg)
@CrackedTo Due to the KillerToys breach ?♂️, olivia.messla@outlook.de was linked to the password niemals1234. This is his first mistake!
FloraiN also tends to reuse similar passwords: niemals123, niemals1234.
![[Image: GjOBmytXAAAM3Rj.jpg]](https://external-content.duckduckgo.com/iu/?u=https://pbs.twimg.com/media/GjOBmytXAAAM3Rj.jpg)
His password led us to multiple emails: florian.marzahl@live.de, fmarzahl137@gmail.com, and florianmarzahl@hotmail.de.
Now we have a name: Florian Marzahl.
Using , we found the GitHub, Google, PayPal, and Trello accounts linked to fmarzahl137@gmail.com.
![[Image: GjODtQPWEAAyYY8.jpg]](https://external-content.duckduckgo.com/iu/?u=https://pbs.twimg.com/media/GjODtQPWEAAyYY8.jpg)
His Google profile picture matches his LinkedIn photo, where he's listed as the Co-Founder of Sellix.
linkedin.com/in/florian-m-0…
![[Image: GjOE4oLWsAAkoHR.jpg]](https://external-content.duckduckgo.com/iu/?u=https://pbs.twimg.com/media/GjOE4oLWsAAkoHR.jpg)
In an interview, Sellix co-founder Daniele Servadei confirms that Florian Marzahl is his business partner in the company.
"I met Sellix’s other co-founder, Florian Marzahl, online"
To conclude, Florian Marzahl, aka FloraiN, a German national, was a founding member of the Cracked forum.
Through his company, 1337 Services GmbH, he developed StarkRDP and RDP[.]sh before co-founding Sellix.
@CrackedTo is the official X account of the forum. The associated email, olivia.messla@outlook.de, was revealed in the 2023 Twitter breach.
![[Image: GjN_UwQWcAAkvOv.jpg]](https://external-content.duckduckgo.com/iu/?u=https://pbs.twimg.com/media/GjN_UwQWcAAkvOv.jpg)
- Nulled: TestingRain, Infinity, FloraiN
- RaidForums: FloraiN
![[Image: GjN_-6FWIAAMkDG.jpg]](https://external-content.duckduckgo.com/iu/?u=https://pbs.twimg.com/media/GjN_-6FWIAAMkDG.jpg)
@CrackedTo Due to the KillerToys breach ?♂️, olivia.messla@outlook.de was linked to the password niemals1234. This is his first mistake!
FloraiN also tends to reuse similar passwords: niemals123, niemals1234.
![[Image: GjOBmytXAAAM3Rj.jpg]](https://external-content.duckduckgo.com/iu/?u=https://pbs.twimg.com/media/GjOBmytXAAAM3Rj.jpg)
His password led us to multiple emails: florian.marzahl@live.de, fmarzahl137@gmail.com, and florianmarzahl@hotmail.de.
Now we have a name: Florian Marzahl.
Using , we found the GitHub, Google, PayPal, and Trello accounts linked to fmarzahl137@gmail.com.
![[Image: GjODtQPWEAAyYY8.jpg]](https://external-content.duckduckgo.com/iu/?u=https://pbs.twimg.com/media/GjODtQPWEAAyYY8.jpg)
His Google profile picture matches his LinkedIn photo, where he's listed as the Co-Founder of Sellix.
linkedin.com/in/florian-m-0…
![[Image: GjOE4oLWsAAkoHR.jpg]](https://external-content.duckduckgo.com/iu/?u=https://pbs.twimg.com/media/GjOE4oLWsAAkoHR.jpg)
In an interview, Sellix co-founder Daniele Servadei confirms that Florian Marzahl is his business partner in the company.
"I met Sellix’s other co-founder, Florian Marzahl, online"
To conclude, Florian Marzahl, aka FloraiN, a German national, was a founding member of the Cracked forum.
Through his company, 1337 Services GmbH, he developed StarkRDP and RDP[.]sh before co-founding Sellix.