INTERPOL Dismantles 45,000 Malicious IPs, Arrests 94 in Global Cybercrime

INTERPOL just dropped a massive cybercrime takedown — Operation Synergia — hitting 45,000 malicious IPs and nabbing 94 suspects across 72 countries. This global sting targeted phishing and ransomware networks, with law enforcement seizing servers, domains, and crypto assets. The operation ran from September to December 2025, involving 60+ countries and private partners like Group-IB, Kaspersky, and Shadowserver Foundation.

Key stats: 45,000 malicious IPs neutralized, 94 arrests, 70 suspects identified, 1,300+ servers seized, and 1,000+ domains taken down. The operation disrupted phishing, ransomware, and social engineering attacks, with a focus on Southeast Asia, where 80% of the malicious infrastructure was located. INTERPOL’s Cybercrime Directorate led the charge, coordinating with national cybercrime units and private sector experts.

The takedown highlights the scale of cybercrime — from phishing scams to ransomware-as-a-service — and INTERPOL’s push for cross-border collaboration. With crypto assets seized and infrastructure dismantled, this op shows law enforcement is leveling up against digital threats. Stay tuned for more details as INTERPOL releases its full report.