{"id":2037657,"date":"2024-11-27T14:28:48","date_gmt":"2024-11-27T19:28:48","guid":{"rendered":"https:\/\/securityboulevard.com\/?p=2037657"},"modified":"2024-11-27T14:28:48","modified_gmt":"2024-11-27T19:28:48","slug":"interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti","status":"publish","type":"post","link":"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/","title":{"rendered":"Interpol, African Nations Arrest 1,006 in Sweeping \u2018Operation Serengeti\u2019"},"content":{"rendered":"

Interpol and law enforcement agencies from 19 African countries arrested more than a 1,000 and shut down hundreds of thousands of infrastructures and networks used to run cyberattacks from ransomware to business email compromise to distributed denial-of-service (DDoS) around the world.<\/p>\n

The cybercriminal operations racked up more than 35,000 victims and were linked to almost $193 million in losses, according to Interpol, which along with Afripol led the law enforcement crackdown that was dubbed \u201cOperation Serengeti.\u201d Almost $44 million was recovered.<\/p>\n

In all, 1,006 people were arrested and took apart 134,089 infrastructures and networks, according to Interpol.<\/p>\n

Information that drove the operation was provided by investigators in the 19 participating countries \u2013 which included Algeria, C\u00f4te d’Ivoire, the Democratic Republic of the Congo, Nigeria, Rwanda, and South Africa \u2013 and was disseminated through 65 reports. Operation Serengeti spanned September 2 to October 31.<\/p>\n

Going Proactive Against Cybercriminals<\/h3>\n

Officials from both Interpol and Afripol touted the multinational effort, though Interpol Secretary General Valdecy Urquiza said in a statement<\/a> that the arrests and other actions resulting from Operation Serengeti are \u201cjust the tip of the iceberg, which is why we will continue targeting these criminal groups worldwide.\u201d<\/p>\n

The crackdown was another example of international efforts against high-profile and sprawling cybercriminal enterprises that have targeted such threat groups as LockBit (with Operation Cronos<\/a>) and myriad ransomware, phishing, and infostealer infrastructures (Operation Synergia II<\/a>).<\/p>\n

\u201cFrom multi-level marketing scams to credit card fraud on an industrial scale, the increasing volume and sophistication of cybercrime attacks is of serious concern,\u201d Urquiza said.<\/p>\n

Cybersecurity Vendors Join In<\/h3>\n

Seven cybersecurity vendors also were involved in Operation Serengeti. Kaspersky provided information about threat actors, data about ransomware attacks and malware on the African continent, and indicators of compromise (IoC) for malicious infrastructure, according to company officials. They noted that during the operation, investigators found ransomware strains like LockBit, Rhysida, and Medusa being used, as well as Grandoreiro, a banking trojan from Brazil.<\/p>\n

\u201cAs Africa is going through a rapid digitization, the threat of cybercrime on the continent is also escalating,\u201d they wrote in a blog post<\/a>. \u201cIn the African region in particular, ransomware has emerged as a prominent attack vector, targeting critical infrastructure, financial institutions, and manufacturing facilities, among others.\u201d<\/p>\n

During the first 10 months of the year, more than 165,000 ransomware attacks in Africa were detected, the cybersecurity firm wrote, adding that spyware and password stealers also were targeting victims in the region.<\/p>\n

Group-IB, another cybersecurity vendor, received 19 requests<\/a> from law enforcement agencies for support and provided information about investment-related scams and schemes that involved bad actors impersonating government officials, phishing, pig butchering, and online casinos.<\/p>\n

The company said it also identified about 10,000 DDoS attacks that had been launched in 2023 from servers in Africa, more than 3,000 phishing domains hosted in the region, and details about data stealers and threat actors that published data leaks from Africa on dark web forums.<\/p>\n

Cases in Point<\/h3>\n

Interpol outlined some of the criminal operations that were shut down, including a credit card fraud setup that led to $8.6 million in losses. The money was stolen via fraudulent scripts run after the bad actors altered a banking system\u2019s security protocol and quickly redistributed through the SWIFT fund transfer system to companies in the United Arab Emirates, Nigeria, and China. From there the money went to digital asset institutions. Almost two dozen were arrested.<\/p>\n

Five Chinese nationals and three others were arrested in Senegal for running a $6 million online Ponzi scheme that scammed 1811 victims. A search of an apartment found more than 900 SIM cards, $11,000 in cash, phones, laptops, and copies of victims\u2019 ID cards.<\/p>\n

A group of people were arrested in Cameroon for luring victims who had paid a \u201cmembership fee\u201d with promises of employment or training, only to hold them captive and forcing them to participate in other scams. The group appeared to have collected at least $150,000 in fees.<\/p>\n

A crime group in Angola running a virtual casino in the capital city of Luanda targeted gamblers in Brazil and Nigeria and defrauded them and offering a percentage of winnings to members who recruited new subscribers. Law enforcement authorities arrested about 150 people and seized 200 computers and more than 100 mobile phones.<\/p>\n","protected":false},"excerpt":{"rendered":"

Interpol led 19 African countries in a massive anti-cybercriminal effort dubbed “Operation Serengeti” that shut down a range of scams and attacks that bled $193 million from 35,000 victims. More than 1,000 people were arrested and more than 134,000 malicious infrastructures shut down.<\/p>\n","protected":false},"author":20461,"featured_media":1851365,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[230,23406,13571,21858,308,20984,23435,14089,14098,14097,98631,99462,99461,13418,14096,21129],"tags":[102463,58652,58288,1782],"class_list":["post-2037657","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-security","category-blogs","category-data-security","category-sb-featured","category-identity-access","category-incident-response","category-malware","category-network-security","category-sb-news","category-sb","category-social-facebook","category-social-linkedin","category-social-x","category-sb-spotlight","category-threat-intelligence","category-threats-breaches","tag-africa-cybersecurity","tag-interpol","tag-online-scams","tag-ransomware"],"acf":[],"yoast_head":"\nInterpol, African Nations Arrest 1,006 in Sweeping \u2018Operation Serengeti\u2019 - Security Boulevard<\/title>\n<meta name=\"description\" content=\"Law enforcement from 19 countries also dismantled 134,089 malicious infrastructures and networks and seized almost $44 million.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Interpol, African Nations Arrest 1,006 in Sweeping \u2018Operation Serengeti\u2019\" \/>\n<meta property=\"og:description\" content=\"Interpol led 19 African countries in a massive anti-cybercriminal effort dubbed "Operation Serengeti" that shut down a range of scams and attacks that bled $193 million from 35,000 victims. More than 1,000 people were arrested and more than 134,000 malicious infrastructures shut down.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/\" \/>\n<meta property=\"og:site_name\" content=\"Security Boulevard\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/groups\/24445075146\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-11-27T19:28:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/securityboulevard.com\/wp-content\/uploads\/2020\/06\/police-matt-popovich-cc0.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1540\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jeffrey Burt\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@securityblvd\" \/>\n<meta name=\"twitter:site\" content=\"@securityblvd\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/\",\"url\":\"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/\",\"name\":\"Interpol, African Nations Arrest 1,006 in Sweeping \u2018Operation Serengeti\u2019 - Security Boulevard\",\"isPartOf\":{\"@id\":\"https:\/\/securityboulevard.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/securityboulevard.com\/wp-content\/uploads\/2020\/06\/police-matt-popovich-cc0.jpg\",\"datePublished\":\"2024-11-27T19:28:48+00:00\",\"dateModified\":\"2024-11-27T19:28:48+00:00\",\"author\":{\"@id\":\"https:\/\/securityboulevard.com\/#\/schema\/person\/f38bb7663c788778985274cf1b68758a\"},\"description\":\"Law enforcement from 19 countries also dismantled 134,089 malicious infrastructures and networks and seized almost $44 million.\",\"breadcrumb\":{\"@id\":\"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/#primaryimage\",\"url\":\"https:\/\/securityboulevard.com\/wp-content\/uploads\/2020\/06\/police-matt-popovich-cc0.jpg\",\"contentUrl\":\"https:\/\/securityboulevard.com\/wp-content\/uploads\/2020\/06\/police-matt-popovich-cc0.jpg\",\"width\":1540,\"height\":600,\"caption\":\"Interpol Operation Synergia ransomware phishing\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/securityboulevard.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cybersecurity\",\"item\":\"https:\/\/securityboulevard.com\/category\/blogs\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Network Security\",\"item\":\"https:\/\/securityboulevard.com\/category\/blogs\/network-security\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Interpol, African Nations Arrest 1,006 in Sweeping \u2018Operation Serengeti\u2019\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/securityboulevard.com\/#website\",\"url\":\"https:\/\/securityboulevard.com\/\",\"name\":\"Security Boulevard\",\"description\":\"The Home of the Security Bloggers Network\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/securityboulevard.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/securityboulevard.com\/#\/schema\/person\/f38bb7663c788778985274cf1b68758a\",\"name\":\"Jeffrey Burt\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/securityboulevard.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/securityboulevard.com\/wp-content\/uploads\/2023\/07\/cropped-Jeffrey-Burt-photo-96x96.jpg\",\"contentUrl\":\"https:\/\/securityboulevard.com\/wp-content\/uploads\/2023\/07\/cropped-Jeffrey-Burt-photo-96x96.jpg\",\"caption\":\"Jeffrey Burt\"},\"description\":\"Jeffrey Burt has been a journalist for more than three decades, writing about technology since 2000. He\u2019s written for a variety of outlets, including eWEEK, The Next Platform, The Register, The New Stack, eSecurity Planet, and Channel Insider.\",\"url\":\"https:\/\/securityboulevard.com\/author\/jeffrey-burt\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Interpol, African Nations Arrest 1,006 in Sweeping \u2018Operation Serengeti\u2019 - Security Boulevard","description":"Law enforcement from 19 countries also dismantled 134,089 malicious infrastructures and networks and seized almost $44 million.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/","og_locale":"en_US","og_type":"article","og_title":"Interpol, African Nations Arrest 1,006 in Sweeping \u2018Operation Serengeti\u2019","og_description":"Interpol led 19 African countries in a massive anti-cybercriminal effort dubbed \"Operation Serengeti\" that shut down a range of scams and attacks that bled $193 million from 35,000 victims. More than 1,000 people were arrested and more than 134,000 malicious infrastructures shut down.","og_url":"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/","og_site_name":"Security Boulevard","article_publisher":"https:\/\/www.facebook.com\/groups\/24445075146\/","article_published_time":"2024-11-27T19:28:48+00:00","og_image":[{"width":1540,"height":600,"url":"https:\/\/securityboulevard.com\/wp-content\/uploads\/2020\/06\/police-matt-popovich-cc0.jpg","type":"image\/jpeg"}],"author":"Jeffrey Burt","twitter_card":"summary_large_image","twitter_creator":"@securityblvd","twitter_site":"@securityblvd","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/","url":"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/","name":"Interpol, African Nations Arrest 1,006 in Sweeping \u2018Operation Serengeti\u2019 - Security Boulevard","isPartOf":{"@id":"https:\/\/securityboulevard.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/#primaryimage"},"image":{"@id":"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/#primaryimage"},"thumbnailUrl":"https:\/\/securityboulevard.com\/wp-content\/uploads\/2020\/06\/police-matt-popovich-cc0.jpg","datePublished":"2024-11-27T19:28:48+00:00","dateModified":"2024-11-27T19:28:48+00:00","author":{"@id":"https:\/\/securityboulevard.com\/#\/schema\/person\/f38bb7663c788778985274cf1b68758a"},"description":"Law enforcement from 19 countries also dismantled 134,089 malicious infrastructures and networks and seized almost $44 million.","breadcrumb":{"@id":"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/#primaryimage","url":"https:\/\/securityboulevard.com\/wp-content\/uploads\/2020\/06\/police-matt-popovich-cc0.jpg","contentUrl":"https:\/\/securityboulevard.com\/wp-content\/uploads\/2020\/06\/police-matt-popovich-cc0.jpg","width":1540,"height":600,"caption":"Interpol Operation Synergia ransomware phishing"},{"@type":"BreadcrumbList","@id":"https:\/\/securityboulevard.com\/2024\/11\/interpol-african-nations-arrest-1006-in-sweeping-operation-serengeti\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/securityboulevard.com\/"},{"@type":"ListItem","position":2,"name":"Cybersecurity","item":"https:\/\/securityboulevard.com\/category\/blogs\/"},{"@type":"ListItem","position":3,"name":"Network Security","item":"https:\/\/securityboulevard.com\/category\/blogs\/network-security\/"},{"@type":"ListItem","position":4,"name":"Interpol, African Nations Arrest 1,006 in Sweeping \u2018Operation Serengeti\u2019"}]},{"@type":"WebSite","@id":"https:\/\/securityboulevard.com\/#website","url":"https:\/\/securityboulevard.com\/","name":"Security Boulevard","description":"The Home of the Security Bloggers Network","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/securityboulevard.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/securityboulevard.com\/#\/schema\/person\/f38bb7663c788778985274cf1b68758a","name":"Jeffrey Burt","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/securityboulevard.com\/#\/schema\/person\/image\/","url":"https:\/\/securityboulevard.com\/wp-content\/uploads\/2023\/07\/cropped-Jeffrey-Burt-photo-96x96.jpg","contentUrl":"https:\/\/securityboulevard.com\/wp-content\/uploads\/2023\/07\/cropped-Jeffrey-Burt-photo-96x96.jpg","caption":"Jeffrey Burt"},"description":"Jeffrey Burt has been a journalist for more than three decades, writing about technology since 2000. He\u2019s written for a variety of outlets, including eWEEK, The Next Platform, The Register, The New Stack, eSecurity Planet, and Channel Insider.","url":"https:\/\/securityboulevard.com\/author\/jeffrey-burt\/"}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/securityboulevard.com\/wp-content\/uploads\/2020\/06\/police-matt-popovich-cc0.jpg","jetpack_shortlink":"https:\/\/wp.me\/p91vu9-8y5r","_links":{"self":[{"href":"https:\/\/securityboulevard.com\/wp-json\/wp\/v2\/posts\/2037657","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/securityboulevard.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/securityboulevard.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/securityboulevard.com\/wp-json\/wp\/v2\/users\/20461"}],"replies":[{"embeddable":true,"href":"https:\/\/securityboulevard.com\/wp-json\/wp\/v2\/comments?post=2037657"}],"version-history":[{"count":1,"href":"https:\/\/securityboulevard.com\/wp-json\/wp\/v2\/posts\/2037657\/revisions"}],"predecessor-version":[{"id":2037658,"href":"https:\/\/securityboulevard.com\/wp-json\/wp\/v2\/posts\/2037657\/revisions\/2037658"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/securityboulevard.com\/wp-json\/wp\/v2\/media\/1851365"}],"wp:attachment":[{"href":"https:\/\/securityboulevard.com\/wp-json\/wp\/v2\/media?parent=2037657"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/securityboulevard.com\/wp-json\/wp\/v2\/categories?post=2037657"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/securityboulevard.com\/wp-json\/wp\/v2\/tags?post=2037657"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}