INTERPOL Arrests 41, Takes Down 22,000 Malicious IPs and 59 Servers

INTERPOL with global law enforcement and Group-IB, successfully dismantled a vast network of malicious IP addresses and servers. This coordinated effort targeted cybercriminals involved in phishing, ransomware, and information theft.

In a high-profile global operation, INTERPOL, in collaboration with law enforcement agencies from 95 countries and cybersecurity firm Group-IB, has successfully dismantled a vast network of malicious IP addresses and servers.

This coordinated effort, known as Operation Synergia II, targeted cybercriminals involved in phishing, ransomware, and information-stealing activities. From April to August 2024, law enforcement agencies and cybersecurity experts worked tirelessly to identify and neutralize cyber threats. Hong Kong, Mongolia, Macau, Madagascar, and Estonia played key roles in identifying/disabling malicious servers and arresting suspects.

Officers from the Hong Kong Police Force raided the suspects’ premises, taking over 1,037 servers linked to malicious activities offline. Image credit: INTERPOL and the Hong Kong Police Force (Via Group-IB)

Through this effort, over 22,000 malicious IP addresses and 59 servers were taken down, crippling the infrastructure used by cybercriminals. Authorities seized around 43 electronic devices, including laptops, mobile phones, and hard drives, which could contain crucial evidence. They arrested 41 individuals, and investigations are ongoing for 65 others suspected of involvement in cybercrime.

INTERPOL’s Gateway Partner Group-IB’s advanced threat intelligence and digital forensics capabilities also played a crucial role in tracking/disrupting malicious infrastructure. Group-IB’s analysts discovered over 2,500 IP addresses linked to 5,000 phishing websites and 1,300 IP addresses linked to various malware activities across 84 countries.

The company’s CEO, Dmitry Volkov, appreciated the operation’s success, stating that closer collaboration between the public and private sectors is essential to effectively combat cybercrime and safeguard the information and data of clients and society globally.

For your information, Operation Synergia II, is the successor of Operation Synergia, in which Group-IB’s Threat Intelligence and High-Tech Crime Investigation teams identified over 500 IP addresses hosting phishing sites and 1,900 IP addresses used by ransomware, Trojan, and other malware operators. The malicious resources were found in over 50 countries, with malicious infrastructure distributed across 200+ web hosting providers worldwide.

INTERPOL’s Cybercrime Directorate, led by Neal Jetton, has played a crucial role in dismantling cybercrime networks by sharing intelligence, facilitating cooperation, and providing technical expertise, helping law enforcement agencies globally to address such complex challenges effectively.

Last year, Interpol’s HAECHI IV operation, in collaboration with the South Korean government, blocked 82,112 suspicious bank accounts and seized $199 million in cash and $101 million worth of crypto assets.

The six-month operation targeted seven types of scams, including voice phishing, romance scams, sextortion, investment fraud, and money laundering. Now Operation Synergia II’s success shows the usefulness of international collaboration in combating cybercrime.

“INTERPOL is proud to bring together a diverse team of member countries to fight this ever-evolving threat and make our world a safer place,” Jetton stated.

1. AI-Powered Scams Fuel Global Cybercrime Surge: INTERPOL
2. Op Narsil – INTERPOL Busts Decade-Old Child Abuse Network
3. INTERPOL Dismantles ’16shop’ Phishing-as-a-Service Platform
4. Interpol arrests Moroccan hacker over phishing, malware scam
5. Interpol Busts Human Traffickers Luring Victims with Fake Job Ads