‘LabHost’, a service that was set up in 2021 by a criminal cyber network, enabled the creation of ‘phishing’ websites designed to trick victims into revealing personal information such as email addresses, passwords and bank details.

Users were able to log on and choose from existing sites or request bespoke pages replicating those of trusted brands, including banks, healthcare agencies and postal services.