45,000 Malicious IPs Dismantled by INTERPOL in Global Operation that Resulted in Over 90 Arrests
Published
Key Takeaways
- Massive Infrastructure: Operation Synergia III successfully dismantled over 45,000 malicious IP addresses and servers across 72 countries.
- Significant Arrests: Law enforcement officials seized 212 electronic devices linked to sophisticated phishing, malware, and ransomware operations.
- Strategic Collaboration: This global operation leveraged actionable intelligence from INTERPOL and private sector partners, resulting in the arrest of 94 suspects.
Authorities successfully disrupted over 45,000 malicious IPs and servers dedicated to malware distribution, ransomware extortion, and advanced phishing schemes. Tactical raids resulted in 94 arrests, with an additional 110 individuals currently under investigation. Operational seizures included 212 servers and electronic devices.
Impact of Operation Synergia III
Regional actions were highly effective. In Bangladesh and Togo, police arrested a total of 50 suspects involved in specialized fraud rings executing social engineering, sextortion, and identity theft schemes, according to Interpol.
- Macau – 33,000 phishing and fraudulent domains related to fake casinos and official bank, government, and payment service sites defrauded victims by topping up their accounts or stealing personal information and credit card details.
- Togo – 10 suspects were arrested for operating a fraud ring from a residential area (technical crimes, such as hacking social media accounts and social engineering schemes, including romance scams and sextortion), impersonating the account holder to ultimately obtain money transfers.
- Bangladesh – 40 suspects were arrested, and 134 electronic devices were seized in relation to a large range of cybercrime schemes, including loan and job scams, identity theft, and credit card fraud.
Coordinated closely by INTERPOL's cybercrime divisions, Operation Synergia III spanned from July 2025 to January 2026, tracking, identifying, and dismantling the server architectures powering modern cyber syndicates.
Future Cybersecurity Implications
The success of this coordinated enforcement action highlights a critical shift in mitigating transnational digital threats. By transforming raw threat data into actionable tactical intelligence, agencies can disrupt the core routing infrastructure that enables malicious campaigns.
Operation Synergia III involved agencies from 72 countries and private-sector cybersecurity intelligence firms, including Group-IB and Trend Micro.
Last week, Russian cybercriminals targeted the Signal and WhatsApp accounts of high-value individuals in a large-scale phishing operation, and a phone scam ring suspect was arrested by law enforcement in Florida for government impersonation fraud.
Related
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular