Melbourne phishing kit user sentenced after stealing $34,990

A Melbourne-based user of a now-dismantled phishing-as-a-service platform has been sentenced to 200 hours of community service and must also pay $34,990 in compensation.

He was also sentenced to three months’ imprisonment, but that will be served as a "good behaviour order" in the community.

The man was sentenced on Friday after pleading guilty to seven charges earlier in the week

He was a user of LabHost, a website that sold access to phishing kits that was dismantled by authorities in April last year.

LabHost could “fraudulently replicate more than 170 websites of reputable banks, government entities and other major organisations,” the Australian Federal Police said.

According to police, the man “fraudulently obtained the personal information of 11 victims, including birth dates, addresses and phone numbers, via a phishing scam.”

“He then used the information from two victims to steal $34,990.”

The compensation the man has been ordered to pay will go to the Victorian state government victims of crime fund. 

“Victims in relation to this matter can apply to be compensated for their loss from this victim of crimes fund,” police said.