INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Interpol Targets Cybercrime Network in MENA Region

| 2026-05-18 14:00 LOW HIGH LAW ENFORCEMENT
JSON
Executive Summary
AI-generated
On 2026-05-18, a coordinated cybercrime crackdown across the Middle East and North Africa (MENA) region led to 201 arrests as part of Operation Ramz. The operation, which ran from October 2025 to February 2026, involved authorities from Algeria, Bahrain, Egypt, Iraq, Jordan, Lebanon, Libya, Morocco, Oman, Palestine, Qatar, Tunisia, and the United Arab Emirates. Intelligence in Qatar uncovered compromised devices used by unsuspecting victims to spread threats, while in Jordan, police exposed a financial fraud scam tied to human trafficking that rescued 15 victims. In Algeria, authorities dismantled a phishing-as-a-service operation, seizing equipment and arresting one suspect, while in Morocco, they seized devices containing banking data and phishing tools. The operation also led to the seizure of 53 servers used in cybercriminal activities and the dissemination of almost 8000 pieces of data and intelligence among participating countries.
Technical Mitigations AI-generated
• Block phishing-as-a-service operations, as seen in Algeria where authorities dismantled a phishing-as-a-service operation. • Disable vulnerable servers containing sensitive data, such as the one disabled by Omani authorities in a private residence. • Use devices and systems that have been previously identified to be compromised for malicious activities, as intelligence in Qatar uncovered compromised devices being used by unsuspecting victims.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Operation RamzOperation RamzOperation RamsOperation Rams
Target & Sectors
GCC GCC AFRICA AFRICA governmentgovernment
Incident Timeline
‎February 2026
Interpol launched Operation Ramz, a multi-agency cybercrime crackdown in the MENA region involving 12 countries and numerous private sector partners, resulting in the arrest of 201 individuals, identification of additional suspects and victims, and seizure of malicious servers.
victims 15 victims
In Jordan, police forces exposed a financial fraud scam tied to human trafficking, rescuing 15 victims who had been forced into cybercrime after having their passports confiscated.
victims 3867 victims
As well as the 201 individuals arrested, Interpol and its allies identified additional 382 suspects and 3867 victims.
infrastructure 53 servers
The operation also led to the seizure of 53 servers used in cybercriminal activities.
‎2026/05/18
Interpol coordinated an expansive investigation with 13 countries in the Middle East and North Africa to disrupt and take down cybercrime operations, including phishing services and tools, malware and scams.
infrastructure 53 servers
The law enforcement effort netted 201 arrests , led to the seizure of 53 servers and disrupted multiple cybercrime services, Interpol said Monday.
victims 4,000 victims
The collective countermeasures allowed authorities to pin the various malicious activities to nearly 4,000 victims.
Tactical Metrics
Metrics
victims
15
Victims
In Jordan, police forces exposed a financial fraud scam tied to human trafficking, rescuing 15 victims who had been forced into cybercrime after having their passports confiscated.
Metrics
victims
3,867
Victims
As well as the 201 individuals arrested, Interpol and its allies identified additional 382 suspects and 3867 victims.
Metrics
infrastructure
53
Servers
The operation also led to the seizure of 53 servers used in cybercriminal activities.
The law enforcement effort netted 201 arrests , led to the seizure of 53 servers and disrupted multiple cybercrime services, Interpol said Monday.
Metrics
victims
4,000
Victims
The collective countermeasures allowed authorities to pin the various malicious activities to nearly 4,000 victims.
Intelligence Sources
CyberScoop 2026-05-18
Infosecurity-Magazine 2026-05-18
Infosecurity-Magazine 2026-05-18