Bundeskriminalamt durchsucht 53 Server im Rahmen der Operation Ramz gegen Cyberbetrug und Malware

Oman: A vulnerable server hosted in a private residence was found infected with malware and exposed critical data, prompting immediate shutdown.

Algeria: Law enforcement dismantled a phishing-as-a-service platform, seizing infrastructure and arresting one suspect.

Morocco: Authorities confiscated devices containing banking data and phishing tools, and multiple individuals are facing legal proceedings.

Sicherheitslage und Risiko

The seizure of 53 servers played a central role in disrupting malicious operations, particularly those used to host phishing kits, command-and-control (C2) infrastructure, and scam platforms. seizure of 53 servers (Source: Interpol) These systems often enable attackers to scale campaigns targeting financial institutions and individuals.

INTERPOL collaborated with private-sector partners, including Group-IB, Kaspersky, Shadowserver Foundation, Team Cymru, and TrendAI, to track malicious infrastructure and analyze threat intelligence. This public-private partnership enabled faster identification of indicators of compromise (IOCs) and improved response coordination.

Operation Ramz highlights the increasing sophistication of cybercriminal ecosystems in the MENA region, particularly the use of distributed infrastructure and engineering tactics. The discovery of human trafficking elements within cyber scam operations also underscores the overlap between cybercrime and organized crime networks.

The initiative received support from the Qatar Ministry of Interior and funding from the European Union and the Council of Europe under the CyberSouth+ project. Authorities emphasized that continued intelligence sharing and joint operations will be critical to counter evolving cyber threats and prevent further financial losses across the region. on