SINGAPORE – A primary-of-its-kind cybercrime operation within the MENA area has ended in the arrest of 201 folks, with an extra 382 suspects known.
13 international locations from the Heart East and North Africa took section in Operation Ramz (October 2025 – 28 February 2026) which aimed to analyze and disrupt malicious infrastructure, determine and arrest suspects, and save you long term losses.
The operation fascinated with neutralizing phishing and malware threats, in addition to tackling cyber scams that inflict serious price to the area.
Along with the arrests made, 3,867 sufferers had been known, and 53 servers had been seized.
Operation Ramz marked a milestone as the primary cyber operation of its scale coordinated via INTERPOL within the MENA area. All through this effort, just about 8,000 items of an important knowledge and intelligence had been disseminated amongst collaborating international locations to begin and fortify investigations.
Neal Jetton, INTERPOL’s Director of Cybercrime, mentioned:
“In a world where cybercriminals exploit the digital landscape without borders, Operation Ramz demonstrates the effectiveness of global collaboration. INTERPOL is dedicated to working with its member countries and private sector partners to take down malicious infrastructure, disrupt criminal groups and bring perpetrators to justice.”
Just about 8,000 items of an important knowledge and intelligence had been disseminated amongst collaborating international locations, together with Jordan, to begin and fortify investigations.
Moroccan government seized computer systems, smartphones and exterior onerous drives containing banking knowledge and instrument used for phishing operations.
The operation fascinated with neutralizing phishing and malware threats, in addition to tackling cyber scams.
Jordanian police pinpointed the site of a pc getting used to run monetary fraud scams.
Operational highlights
– In Qatar, intelligence got via Operation Ramz ended in the id of compromised gadgets. Investigators made up our minds that the unsuspecting house owners had been themselves sufferers of cyberattacks and unaware that their gadgets had been getting used to unfold malicious threats. The affected methods had been in an instant secured, and tool house owners had been notified to take the essential preventive measures.
– Jordanian police pinpointed the site of a pc getting used to run monetary fraud scams. Sufferers had been persuaded to take a position via what looked to be a sound buying and selling platform, which close down as soon as finances were deposited. A raid exposed 15 folks sporting out the scams, however investigators made up our minds that they had been sufferers of human trafficking who were recruited underneath the false promise of employment from their house international locations in Asia. Upon arrival in Jordan, their passports had been confiscated, and so they had been pressured or coerced into collaborating within the scheme. Two folks suspected of orchestrating the operation had been arrested.
– Investigators in Oman known a server in a non-public place of dwelling that contained delicate data. Despite the fact that the landlord had reliable get entry to to the guidelines, the server suffered from more than one essential safety vulnerabilities together with malware an infection. Movements had been taken to disable the server to forestall further hurt.
– In Algeria, a web site providing phishing as a provider was once known and dismantled as a part of Operation Ramz. After finding the suspicious server, government effectively seized a server, a pc, a cell phone and difficult drives containing phishing instrument and scripts. One suspect was once taken into custody.
– Moroccan government seized computer systems, smartphones and exterior onerous drives containing banking knowledge and instrument used for phishing operations. Consequently, 3 persons are present process judicial procedures, whilst others stay underneath investigation.
All through Operation Ramz, INTERPOL labored carefully with its companions, Team-IB, Kaspersky, the Shadowserver Basis, Workforce Cymru and TrendAI to trace unlawful cyber actions and determine malicious servers.
Be aware to editors
Operation Ramz won fortify from the Qatar Ministry of Inner and was once partly funded via the Ecu Union and the Council of Europe underneath the CyberSouth+ venture.Collaborating international locations: Algeria, Bahrain, Egypt, Iraq, Jordan, Lebanon, Libya, Morocco, Oman, Palestine, Qatar, Tunisia, UAE.
