World · Europe · 6 hrs ago
North Macedonia charges alleged OLVX cybercrime marketplace operator
North Macedonian authorities have charged the alleged operator of OLVX, an online marketplace for stolen data and cybercrime tools.
The 20-year-old suspect, identified by officials as “E.A.,” is accused of computer fraud, misuse of personal data and possessing and distributing child sexual abuse material.
OLVX operated from 2023 to 2025, selling login details, personal information and tools used in cyberattacks.
Investigators say the suspect offered more than 1,500 sets of stolen credentials and also ran a Telegram group offering illegal services and software.
The platform’s sales exceeded $500,000, and a seized server held data on more than 2,600 customer accounts, according to officials.
The FBI supported a joint investigation with North Macedonia, which the FBI called the first cyber operation coordinated between the two.
The case now moves forward through charges filed near Tetovo; the allegations have not been proven in court.
Authorities in North Macedonia charged a 20-year-old alleged administrator of OLVX, a cybercrime marketplace that sold stolen data and tools.
Officials identified the suspect as “E.A.” and accused them of computer fraud, misuse of personal data, and producing and distributing child sexual abuse material.
Authorities allege OLVX was used to sell stolen data, credentials and malicious tools between 2023 and 2025.
Investigators said the suspect offered more than 1,500 sets of stolen credentials for sale and ran a Telegram group offering illegal services and software.
The FBI provided intelligence and assisted in the joint investigation with North Macedonian authorities.
- Who
- A 20-year-old North Macedonian citizen identified by officials as “E.A.” is accused of administering OLVX.
- What
- Authorities charged the suspect with computer fraud, misuse of personal data, and producing and distributing child sexual abuse material.
- When
- Charges were reported on October 14, 2026. The alleged marketplace activity dates from 2023 to 2025.
- Where
- North Macedonia; authorities identified the village of Golema Rečica near Tetovo.
- Why
- Authorities allege the suspect used OLVX and a Telegram group to sell stolen data, credentials, malicious tools and other services linked to cybercrime.
This story does not have two clearly opposing sides.
ZeroFox published an investigation warning that OLVX was becoming increasingly popular among cybercriminals.
Authorities allege OLVX was used to sell stolen data, credentials and malicious tools.
European authorities said they dismantled the platform, arrested the alleged administrator and searched their home.
Reports said North Macedonian authorities had filed charges against the alleged administrator; accounts differ on the sequence of the arrest and charges.
- Suspect
- 20-year-old North Macedonian citizen identified as “E.A.
- Marketplace
- OLVX
- Alleged activity period
- 2023–2025
- Stolen credentials
- More than 1,500 sets allegedly offered for sale
- Location
- Golema Rečica near Tetovo
- Investigation
- FBI intelligence support and joint work with North Macedonian authorities
3 sources
What people are saying
The existence of this marketplace directly endangered the digital security of thousands of American citizens who rely on the integrity of accounts they use
Active between 2023 and 2025, OLVX is alleged to have unlawfully sold victims’ personally identifiable information and login credentials via over 1,500 seller accounts
Additionally, evidence was obtained indicating that the suspect had acquired and possessed child sexual abuse material (CSAM) for personal use through the Telegram application