CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Interpol-led cybercrime suppression operation Ramz targets phishing, malware, and fraud networks across MENA

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Interpol coordinated Operation Ramz, a regional cybercrime suppression effort spanning 13 Middle East and North Africa (MENA) countries from October 2025 to February 2026, resulting in 201 arrests and the identification of 382 suspects alongside 3,867 victims. The operation focused on dismantling phishing, malware, and cyber scam networks, leading to the seizure of 53 malicious servers and the dissemination of nearly 8,000 data and intelligence artifacts to support ongoing investigations. Cross-border coordination included public-private partnerships with security firms such as Group-IB, Kaspersky, Shadowserver Foundation, Team Cymru, and TrendAI, alongside regional law enforcement and EU/Council of Europe funding.

Timeline

  1. 18.05.2026 17:00 1 articles · 14h ago

    Interpol’s Operation Ramz concludes with 201 arrests, 53 server seizures, and regional intelligence sharing

    Operation Ramz, led by Interpol and spanning October 2025 to February 2026 across 13 MENA countries, concluded with the arrest of 201 individuals, identification of 382 suspects, and 3,867 victims recognized. The operation resulted in the seizure of 53 malicious servers and the dissemination of nearly 8,000 data and intelligence artifacts to support ongoing investigations. Public-private partners including Group-IB, Kaspersky, Shadowserver Foundation, Team Cymru, and TrendAI provided threat intelligence and technical support, while regional coordination involved EU and Council of Europe funding under the CyberSouth+ project.

    Show sources
    Open in new tab

Information Snippets

  • Operation Ramz involved 13 MENA countries: Algeria, Bahrain, Egypt, Iraq, Jordan, Lebanon, Libya, Morocco, Oman, Palestine, Qatar, Tunisia, and the United Arab Emirates.

    First reported: 18.05.2026 17:00
    1 source, 1 article
    Show sources

  • A total of 201 arrests were made, 382 suspects identified, and 3,867 victims recognized during the operation.

    First reported: 18.05.2026 17:00
    1 source, 1 article
    Show sources

  • Law enforcement seized 53 servers linked to cybercriminal activities and collected nearly 8,000 pieces of intelligence for investigative follow-up.

    First reported: 18.05.2026 17:00
    1 source, 1 article
    Show sources

  • On-site actions in Qatar uncovered compromised devices being used to spread threats, leading to immediate notifications to affected owners.

    First reported: 18.05.2026 17:00
    1 source, 1 article
    Show sources

  • In Jordan, authorities dismantled a financial fraud scam tied to human trafficking, rescuing 15 victims who were coerced into cybercrime after passport confiscation.

    First reported: 18.05.2026 17:00
    1 source, 1 article
    Show sources

  • Omani authorities disabled a vulnerable server in a private residence containing sensitive data, preventing further harm.

    First reported: 18.05.2026 17:00
    1 source, 1 article
    Show sources

  • Algerian authorities dismantled a phishing-as-a-service operation, seizing equipment and arresting one suspect.

    First reported: 18.05.2026 17:00
    1 source, 1 article
    Show sources

  • Moroccan authorities seized devices containing banking data and phishing tools, initiating judicial proceedings against three individuals while others remain under investigation.

    First reported: 18.05.2026 17:00
    1 source, 1 article
    Show sources