Authorities Crack Down on 45,000 Malicious IPs Powering Ransomware Attacks
Law enforcement agencies from 72 countries have successfully dismantled over 45,000 malicious IP addresses and servers in a large-scale international operation targeting cybercrime.
Law enforcement agencies from 72 countries have successfully dismantled over 45,000 malicious IP addresses and servers in a large-scale international operation targeting cybercrime.
Coordinated by INTERPOL, "Operation Synergia III" focused on infrastructure used for ransomware, malware, and phishing campaigns globally. The operation ran from Tue, Jul 18, 2025, to Sat, Jan 31, 2026, demonstrating significant international collaboration.
INTERPOL transformed data into actionable threat intelligence, enabling member countries to conduct localized operations and disrupt major cybercriminal networks. Malicious actors used these IP networks to host command-and-control (C2) servers, deploy ransomware, and manage fraudulent websites.
INTERPOL collaborated with private-sector cybersecurity firms, including Group-IB, Trend Micro, and S2W, to track illicit activities and identify servers behind global attacks. The six-month operation achieved notable results:
Coordinated by INTERPOL, "Operation Synergia III" focused on infrastructure used for ransomware, malware, and phishing campaigns globally.
45,000+ malicious IPs and command servers disabled. 94 individuals arrested across multiple jurisdictions. 110 suspects under active investigation. 212 electronic devices and servers seized for forensic analysis.
Global Syndicates and Tactics Disrupted
The operation's global reach resulted in significant disruptions to various cybercriminal strategies:
Macau, China: Neutralization of over 33,000 fraudulent websites impersonating banking portals, government services, and more, aiming to steal sensitive data and credit card information. Bangladesh: Arrest of 40 suspects and seizure of 134 electronic devices, linked to financial cybercrimes such as identity theft and credit card fraud. Togo: Arrest of a 10-person fraud ring conducting network hacking and social engineering, involved in scams and extortion.
The success of Operation Synergia III highlights the efficacy of international cooperation in combating cybercrime. According to Neal Jetton, INTERPOL’s Director of the Cybercrime Directorate , global collaboration remains crucial in addressing increasingly sophisticated cyber threats.
By uniting law enforcement and private threat intelligence, authorities are dismantling the infrastructure enabling modern ransomware and financial fraud campaigns.
Based on reporting by Cyber Security News.