INTERPOL Dismantles Global Cybercrime Network

Dubai, UAE – June 18, 2025
Group-IB, a global cybersecurity leader headquartered regionally in Dubai, announced its key support for Operation Secure, a high-impact law enforcement campaign coordinated by INTERPOL across the Asia-Pacific region. The operation led to 32 arrests and the dismantling of criminal infrastructures behind large-scale infostealer malware campaigns targeting both individuals and enterprises worldwide.

Spanning from January to April 2025, Operation Secure was part of the Asia & South Pacific Joint Operations Against Cybercrime (ASPJOC), involving law enforcement from 26 countries, with contributions from private sector firms including Group-IB, Kaspersky, and Trend Micro.

Group-IB provided critical threat intelligence on malware families such as Lumma, Risepro, and META Stealer—tools used by cybercriminals to exfiltrate credentials, payment data, browser cookies, and cryptocurrency wallets, often preceding financial fraud and ransomware incidents.

Key outcomes of the operation include:

Takedown of over 20,000 malicious IPs and domains

79% of identified threat infrastructure neutralized

41 servers seized, and over 100 GB of stolen data recovered

Notification of 216,000+ affected users

32 arrests across Vietnam (18), Sri Lanka, and Nauru

Discovery of 117 C2 servers across 89 ISPs in Hong Kong

Neal Jetton, INTERPOL’s Director of Cybercrime, emphasized:

“Operation Secure demonstrates the strength of intelligence sharing in disabling global cyber threats.”

Dmitry Volkov, CEO of Group-IB, added:

“Infostealer malware often marks the beginning of complex cyberattacks. Our intelligence sharing helps dismantle these networks and protect the digital ecosystem.”

Group-IB’s support extends beyond Asia. Its contribution to Operation Red Card in Africa led to over 300 arrests and disruption of cybercriminal networks targeting thousands of victims globally.

As an INTERPOL Gateway Partner and member of EUROPOL’s EC3 Advisory Group, Group-IB reinforces its long-term mission: to enable intelligence-led, globally coordinated cybercrime disruption.