Interpol Takes Down Massive Cybercrime Infrastructure in Global Operation

Image by Pixabay

This post is also available in: עברית (Hebrew)

Interpol has successfully dismantled a vast cybercrime operation in a global crackdown that has targeted phishing, information stealers, and ransomware activities. Dubbed Synergia II, the operation occurred between April 1st and August 31st, 2024, and involved law enforcement from 95 countries. Authorities arrested 41 individuals and are investigating 65 others linked to the criminal network.

The cybercrime infrastructure targeted by Synergia II consisted of 22,000 malicious IP addresses, a key element used for conducting widespread cybercrime operations. In total, 30,000 suspicious IP addresses were identified, with 76%—nearly 23,000—successfully disabled. The operation also led to the seizure of 59 servers and 43 electronic devices, including laptops, mobile phones, and hard disks, which will be analyzed as part of ongoing investigations.

Among the major operations involved in the takedown were extensive raids in Mongolia and Madagascar. In Mongolia, police raided 21 locations, uncovering over 90 individuals involved in cybercrime. Meanwhile, in Madagascar, authorities identified 11 individuals tied to malicious server activities. Additionally, significant server data was seized in Estonia, where more than 80GB of information linked to phishing and banking malware were collected for further analysis.

The focus of Synergia II was to disrupt three of the most damaging forms of cybercrime: phishing, infostealers, and ransomware. According to Cybernews, Phishing attacks are the most common initial access method for cybercriminals, enabling malware deployment, data theft, and further attacks within compromised systems. Infostealers are used to exfiltrate login credentials and financial information, which is either sold on the dark web or used in ransomware attacks.

In 2023, ransomware attacks surged globally by 70%, while infostealer logs saw a 40% increase in sales on dark web markets. The operation’s success not only targeted criminal infrastructure but also prevented countless potential victims from falling prey to these rising cyber threats. Neal Jetton, Director of Interpol’s Cybercrime Directorate, stated, “We’ve not only dismantled malicious infrastructure but also prevented hundreds of thousands of potential victims from falling victim to cybercrime.”