Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Interpol Operation Ramz cybercrime crackdown in MENA

Law Enforcement
First reported
Last updated
Happening score
H score 33
3 unique sources, 6 articles

Summary

Hide ▲

INTERPOL-led Operation Ramz disrupted Sniper Dz, a decade-long phishing-as-a-service (PhaaS) platform, during October 2025-February 2026. Authorities in 13 MENA countries made 201 arrests, including Guedz, the platform’s primary developer and administrator, and seized the site used to offer the service plus hardware containing phishing software and scripts. Group-IB said Sniper Dz had collected more than 45,000 victim records, used 80 phishing templates in five languages, and targeted 30 major global organizations before it was taken down.

Related Happenings

DOJ seizes HuiOne cloud account

Law Enforcement
H score17 First: 24.06.2026 11:55 Last: 24.06.2026 11:55 Sources 1

About this happening: The **U.S. Department of Justice** seized a **cloud computing account** used by **HuiOne Group** subsidiaries, disrupting backend infrastructure tied to **cyber scams** and crimin...

Open Happening

DOJ seizure of CFAKE.com and SOCFAKE.com deepfake domains

Law Enforcement
H score26 First: 16.06.2026 00:56 Last: 16.06.2026 00:56 Sources 1

About this happening: The **U.S. Department of Justice** and **Homeland Security Investigations** seized **CFAKE.com** and **SOCFAKE.com**, disrupting a **deepfake pornography** operation and taking th...

Open Happening

Sniper Dz MENA fake Facebook phishing and monetization campaign

Campaign
H score30 First: 15.06.2026 09:30 Last: 15.06.2026 09:30 Sources 1

How related: "Victims were encouraged to click embedded links to claim the advertised benefits, but were instead redirected through a chain of intermediary websites that ultimately led to phishing and traffic monetization infrastructure."

About this happening: A **Sniper Dz** fraud campaign is targeting **users across the Middle East and North Africa** with **fake Facebook accounts** that impersonate politicians, public figures, and tru...

Open Happening

Sniper Dz free PhaaS ecosystem rebranded to scale phishing operations

Threat Actor Meta
H score43 First: 12.06.2026 11:52 Last: 12.06.2026 11:52 Sources 1

How related: Active since at least 2015, Sniper Dz evolved into a sophisticated criminal platform offering ready-made phishing kits, hosting infrastructure, and operational support to cybercriminals,

About this happening: A long-running **Sniper Dz** ecosystem operated as a **free phishing-as-a-service (PhaaS)** platform that repeatedly rebranded, lowering the barrier for large-scale credential the...

Latest development: 15.06.2026 09:30

Fraudulent Facebook accounts impersonating politicians, public figures, and trusted organizations targeted users across the Middle East and North Africa with fake offers for free mobile internet packages, financial compensation, and government subsidy programs, then routed victims through Linkbio and Linktree decoy pages into Sniper Dz phishing and traffic monetization infrastructure that abuses browser notification permissions, back-button hijacking, tab-under redirections, premium SMS subscriptions, premium-rate calls, and investment scams.

Open Happening

Europol-led AudiA6 crypto-laundering takedown

Law Enforcement
H score29 First: 11.06.2026 18:55 Last: 11.06.2026 18:55 Sources 1

About this happening: **Law enforcement** dismantled **AudiA6**, a **cryptocurrency laundering service** used by **ransomware gangs** and other cybercriminal networks, in a **June 10, 2026** multinatio...

Open Happening

Timeline

  1. 18.05.2026 17:00 7 articles · 1mo ago

    Interpol discloses Operation Ramz crackdown results in MENA

    Initial Disclosure

    Interpol disclosed Operation Ramz, a first-of-its-kind cybercrime crackdown across 13 countries in the Middle East and North Africa that targeted phishing, malware, and cyber scams. The operation led to 201 arrests, 382 additional suspects identified, 3867 victims identified, and 53 servers seized, while nearly 8000 pieces of data and intelligence were shared to support future investigations. On-site actions in Qatar, Jordan, Oman, Algeria, and Morocco uncovered compromised devices, a financial fraud scam tied to human trafficking, a vulnerable server in a private residence, a phishing-as-a-service operation, and devices containing banking data and phishing tools; the effort also involved authorities from Algeria, Bahrain, Egypt, Iraq, Jordan, Lebanon, Libya, Morocco, Oman, Palestine, Qatar, Tunisia, and the United Arab Emirates, with support from the Qatar Ministry of Interior and funding under CyberSouth+.

    Show sources
    Open in new tab
  2. 18.05.2026 17:00 7 articles · 1mo ago

    Interpol discloses Operation Ramz crackdown results in MENA

    Initial Disclosure

    Interpol disclosed Operation Ramz, a first-of-its-kind cybercrime crackdown across 13 countries in the Middle East and North Africa that targeted phishing, malware, and cyber scams. The operation led to 201 arrests, 382 additional suspects identified, 3867 victims identified, and 53 servers seized, while nearly 8000 pieces of data and intelligence were shared to support future investigations. On-site actions in Qatar, Jordan, Oman, Algeria, and Morocco uncovered compromised devices, a financial fraud scam tied to human trafficking, a vulnerable server in a private residence, a phishing-as-a-service operation, and devices containing banking data and phishing tools; the effort also involved authorities from Algeria, Bahrain, Egypt, Iraq, Jordan, Lebanon, Libya, Morocco, Oman, Palestine, Qatar, Tunisia, and the United Arab Emirates, with support from the Qatar Ministry of Interior and funding under CyberSouth+.

    Show sources
    Open in new tab