May 18 / Latest News

INTERPOL’s Operation Ramz Leads to 201 Arrests in Major MENA Cybercrime Crackdown

INTERPOL has announced the results of a sweeping, first‑of‑its‑kind cybercrime operation across the Middle East and North Africa (MENA), resulting in 201 arrests and the identification of 382 additional suspects.

The coordinated effort, known as Operation Ramz, brought together law enforcement agencies from 13 countries between October 2025 and February 2026 to dismantle malicious infrastructure, disrupt cybercriminal networks, and prevent further financial and data losses.

According to INTERPOL, the operation targeted phishing schemes, malware distribution, and online scams that have inflicted significant economic damage across the region. Authorities identified 3,867 victims, seized 53 servers, and confiscated devices containing phishing tools, stolen banking data, and malware.

Algerian officials dismantled a phishing‑as‑a‑service operation, while Moroccan authorities seized hardware tied to large‑scale credential theft. In Oman, investigators discovered a legitimate server in a private residence that had been compromised by malware and exposed sensitive information. Qatar uncovered compromised devices whose owners were unaware their systems were being used to spread malicious threats.

Jordanian police also disrupted a financial fraud scheme masquerading as a legitimate trading platform. A raid revealed 15 individuals forced into the operation through human trafficking, while two alleged organizers were arrested.

Private‑sector partners, including Group‑IB and Team Cymru, provided intelligence on thousands of compromised accounts and active phishing infrastructure. “Cybercrime is borderless, and the only effective response is one that is equally borderless,” said Team Cymru CEO Joe Sander.
Operation Ramz comes amid a broader wave of global cybercrime enforcement actions, including recent arrests and convictions in the U.S. and Europe tied to darknet marketplaces, swatting campaigns, ATM jackpotting, and large‑scale cryptocurrency theft.