Operation Ramz

Campaign
15 incidents First seen 2026-05-18 Last seen 2026-06-18
Overview

Operation Ramz appears in 5 incidents tracked by Vulpsec CTI; the most recent is: Massive MENA cybercrime Operation Ramz disrupts infrastructure and arrests 201 suspects. Targeted sectors: government, cryptocurrency, finance.

Investigate in CTI Graph Login required Open in Dashboard
Threat ecosystem
Actors Malware Campaigns CVEs
Tap a node for a quick look · double-tap to open its profile
At a glance
peak priority 140
Activity by month (incidents)
2026-052026-06
Sectors targeted
media · 4finance · 3government · 3telecommunications · 2cryptocurrency · 1energy · 1
Countries targeted
AE · 14AO · 12BF · 12BI · 12BJ · 12BW · 12CD · 12CF · 12CG · 12CI · 12CM · 12CV · 12
Origin
DZ · 10EG · 6JO · 6AO · 5BF · 5BI · 5
Kinds of incident
Law Enforcement · 6Phishing & Social Engineering · 5Industry & Policy · 2Cyberattack (general) · 1DDoS & Disruption · 1Malware & Botnets · 1
Techniques seen in incidents
Phishing · 13Social Engineering · 7T1566 - Phishing · 7T1584.004 - Server · 3Espionage · 2Ransomware · 2Exfiltration · 1Lateral Movement · 1Privilege Escalation · 1Reconnaissance · 1T1588.005 - Exploits · 1T1684 - Social Engineering · 1
Related malware
Neo-reGeorg · 1Qilin · 1
Related CVEs
CVE-2020-1938 · 1CVE-2021-4034 · 1CVE-2022-42475 · 1CVE-2023-27997 · 1CVE-2023-46805 · 1CVE-2024-21762 · 1CVE-2024-21887 · 1CVE-2025-0282 · 1
Incident timeline
2026-06-18
Dark Reading Infosecurity-Magazine
2026-06-18
EU Gets a Head Start in Developing 6G Network Security
Dark Reading
2026-06-12
Interpol Disables Sniper Dz Phishing-as-a-Service Platform
Infosecurity-Magazine Bit Life Media Bit Life Media
2026-06-12
Sniper Dz: cae la plataforma gratuita que facilitaba ciberataques de phishing a ciberdelincuentes
Bit Life Media HackRead The Hacker News
2026-06-12
Sniper Dz: cae la plataforma gratuita que facilitaba ciberataques de phishing a ciberdelincuentes
Bit Life Media
2026-06-12
INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator
The Hacker News The Hacker News
2026-06-11
Lazarus Group Disrupts SniperDz Phishing Network
The Hacker News HackRead The Hacker News HackRead Infosecurity-Magazine Infosecurity-Magazine Bit Life Media Bit Life Media
2026-06-11
Decade-Long SniperDz Phishing Network Disrupted in Operation Ramz
HackRead
2026-06-11
Interpol Dismantles SniperDz Phishing-as-a-Service Platform
Infosecurity-Magazine Infosecurity-Magazine
2026-05-29
Dark Reading Dark Reading
2026-05-20
Interpol's 'Operation Ramz' Pioneers Cross-Region Collabs in Middle East
Dark Reading
2026-05-19
Massive MENA cybercrime Operation Ramz disrupts infrastructure and arrests 201 suspects
Security Affairs
2026-05-19
BleepingComputer The Hacker News Bit Life Media
2026-05-18
More than 200 arrested in cyber raids aimed at Middle East scam networks
TheRecord
2026-05-18
Infosecurity-Magazine Infosecurity-Magazine CyberScoop