An international operation led by INTERPOL has dismantled a massive cybercrime infrastructure used to run phishing scams, malware campaigns and ransomware attacks around the world.
The operation known as Operation Synergia III was carried out between July 18, 2025 and January 31, 2026, and saw authorities from 72 countries and territories working together to disrupt cybercriminal networks.
Law enforcement officials involved in the operation took down over 45,000 malicious IP addresses and servers used to ease online crimes including fraud schemes, identity theft and ransomware attacks.
Twenty-two portable electronic devices were confiscated during the operation which are believed to have been used in a variety of cybercriminal activities including the management of fraudulent operations.
Nine suspects were arrested, and one was identified and remained at large, during this latest operation which built on two earlier efforts.
Cyberscurity companies also worked with authorities by providing intelligence about suspicious domains and servers that they believe are responsible for hosting malicious web pages and distributing malware.
In total, over 100,000 fraudulent web pages designed to impersonate major banks, government agencies, and other official online entities were uncovered by the operation. The web pages are designed to lure users in to divulge personal information and bank account details.
According to INTERPOL’s cybercrime directors, such collaborations with the private sector are increasingly crucial for the fight against sophisticated cybercriminal operations which are expanding across many jurisdictions.
