Two men accused of operating a notorious Russian dark web marketplace that specialized in selling stolen credit card information and offering cybercrime tutorials have been indicted by the U.S. Department of Justice. The suspects, 35-year-old Alex Khodyrev, a Kazakhstan national, and 37-year-old Russian national Pavel Kublitskii, were charged with wire fraud and conspiracy to commit access device fraud, facing up to 20 years in federal prison if convicted.
The indictment follows their arrest in Miami, where both men had been living. The Justice Department also stated that two high-end vehicles, a 2023 Mercedes-Benz owned by Khodyrev and a 2020 Cadillac CT5 Sport sedan owned by Kublitskii, would be seized as assets tied to their criminal activities.
Khodyrev and Kublitskii are accused of managing WWH-Club, a prominent dark web forum used for trading stolen personal information, including credit card numbers, Social Security numbers, and online account credentials. The platform, described in a warrant as a “cross between eBay and Reddit” for hackers, allowed users to exchange illegal information and participate in cybercrime classes. Although the site was primarily in Russian, FBI agents traced its server back to a U.S.-based company, Digital Ocean, which provided crucial information to the investigation.
According to the Justice Department, the two men operated WWH-Club and several related websites, including Skynetzone, Opencard, and Center-Club, from 2014 to 2024, even after relocating to Miami in 2022. These sites were exclusively dedicated to facilitating illegal activities, such as the sale of sensitive financial information, bank accounts, passwords, and other personal data.
The platforms also served as hubs for sharing tools, tips, and strategies for committing cyberattacks and evading law enforcement. At its peak in 2023, WWH-Club boasted over 353,000 users globally. Khodyrev, Kublitskii, and their fellow administrators reportedly profited through advertising revenue, cybercrime class fees, and paid memberships. FBI investigators noted that membership fees on the platform ranged from approximately $130 to $780.
Undercover FBI agents infiltrated WWH-Club, attending multiple cybercrime classes. In one instance, they learned how to access personal financial information stolen during a 2022 hack of LendingTree, a well-known financial services platform.
The investigation led authorities to Khodyrev and Kublitskii through a trail of email addresses, which eventually uncovered photos and Department of Homeland Security records. The records showed that both men arrived in South Florida in December 2022, where they claimed asylum and listed the same address in Hollywood, Florida. Despite appearing unemployed, their social media activity suggested a lavish lifestyle, including renting luxury condos in Sunny Isles Beach and purchasing expensive cars. In one case, Khodyrev paid approximately $110,000 in cash for a 2023 Corvette.
Although Khodyrev and Kublitskii have been detained, WWH-Club remains active. Cybersecurity researchers at Flashpoint confirmed that the site’s current administrators have tried to distance themselves from the two men, removing the accounts identified by the FBI and advising members to change their usernames. Flashpoint has described WWH-Club as “one of the largest Russian-language carding forums,” underscoring the site’s significant role in the global cybercrime ecosystem.
