Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Browse News Feed Stats Watchlists Beta About Contact

Interpol Operation Ramz cybercrime crackdown in MENA

Law Enforcement
First reported
Last updated
Happening score
H score 20
3 unique sources, 3 articles

Summary

Hide ▲

INTERPOL's Operation Ramz led to more than 200 arrests across the Middle East and North Africa, with law enforcement also identifying 382 additional suspects in 13 countries. Authorities seized 53 servers used for phishing, malware, and online fraud, and tied the operation to at least 3,867 confirmed victims from nearly 8,000 intelligence packages recovered from the equipment. The crackdown targeted cybercrime infrastructure and scam activity that was inflicting severe costs across the region.

Related Happenings

Kimwolf operators build a cybercrime-as-a-service DDoS access market

Threat Actor Meta
First: 22.05.2026 11:50 Last: 22.05.2026 11:50 Sources 1

About this happening: The **Kimwolf** operators ran a **cybercrime-as-a-service** market that sold access to infected devices, widening **DDoS-for-hire** abuse. The model turned compromised **digital p...

Open Happening

Dubai Police international crypto scam-center crackdown

Law Enforcement
First: 30.04.2026 14:21 Last: 30.04.2026 14:21 Sources 1

About this happening: Authorities **arrested at least 276 suspects** and **shut down nine cryptocurrency investment fraud centers**, disrupting a cross-border fraud network tied to **pig-butchering sch...

Open Happening

Xu Zewei extradited for U.S. cyberespionage prosecution

Law Enforcement
First: 27.04.2026 22:56 Last: 27.04.2026 22:56 Sources 1

About this happening: **Xu Zewei** was **extradited from Italy to the United States** to face criminal charges in a **cyberespionage** case tied to **China's MSS**. The move expands the legal exposure...

Open Happening

DoJ/FBI/USSS crypto-fraud domain seizure and charges

Law Enforcement
First: 27.04.2026 18:00 Last: 27.04.2026 18:00 Sources 1

About this happening: **DoJ**, **FBI**, and **US Secret Service** investigators **seized 503 domains** linked to **fraudulent crypto platforms**, disrupting infrastructure used in a Cambodia-based scam...

Open Happening

FBI-led takedown of W3LL phishing network

Law Enforcement
First: 13.04.2026 13:35 Last: 13.04.2026 13:35 Sources 1

About this happening: **FBI Atlanta** and **US and Indonesian law enforcement** took down the **W3LL** phishing network, escalating a cross-border cybercrime case tied to **more than $20 million in fra...

Open Happening

Timeline

  1. 18.05.2026 17:00 4 articles · 9d ago

    Interpol discloses Operation Ramz crackdown results in MENA

    Initial Disclosure

    Interpol disclosed Operation Ramz, a first-of-its-kind cybercrime crackdown across 13 countries in the Middle East and North Africa that targeted phishing, malware, and cyber scams. The operation led to 201 arrests, 382 additional suspects identified, 3867 victims identified, and 53 servers seized, while nearly 8000 pieces of data and intelligence were shared to support future investigations. On-site actions in Qatar, Jordan, Oman, Algeria, and Morocco uncovered compromised devices, a financial fraud scam tied to human trafficking, a vulnerable server in a private residence, a phishing-as-a-service operation, and devices containing banking data and phishing tools; the effort also involved authorities from Algeria, Bahrain, Egypt, Iraq, Jordan, Lebanon, Libya, Morocco, Oman, Palestine, Qatar, Tunisia, and the United Arab Emirates, with support from the Qatar Ministry of Interior and funding under CyberSouth+.

    Show sources
    Open in new tab
  2. 18.05.2026 17:00 4 articles · 9d ago

    Interpol discloses Operation Ramz crackdown results in MENA

    Initial Disclosure

    Interpol disclosed Operation Ramz, a first-of-its-kind cybercrime crackdown across 13 countries in the Middle East and North Africa that targeted phishing, malware, and cyber scams. The operation led to 201 arrests, 382 additional suspects identified, 3867 victims identified, and 53 servers seized, while nearly 8000 pieces of data and intelligence were shared to support future investigations. On-site actions in Qatar, Jordan, Oman, Algeria, and Morocco uncovered compromised devices, a financial fraud scam tied to human trafficking, a vulnerable server in a private residence, a phishing-as-a-service operation, and devices containing banking data and phishing tools; the effort also involved authorities from Algeria, Bahrain, Egypt, Iraq, Jordan, Lebanon, Libya, Morocco, Oman, Palestine, Qatar, Tunisia, and the United Arab Emirates, with support from the Qatar Ministry of Interior and funding under CyberSouth+.

    Show sources
    Open in new tab