In a significant blow to cybercriminals across Africa, INTERPOL has announced the results of Operation Serengeti, a coordinated effort that led to the arrest of 1,006 individuals and the dismantling of 134,089 malicious infrastructures and networks. The operation, which ran from September 2 to October 31, 2024, targeted cybercriminals engaged in various forms of online crime, including ransomware attacks, business email compromise (BEC), digital extortion, and online scams.

The operation spanned 19 African countries and was a collaborative effort involving local law enforcement agencies, cybersecurity experts, and international partners. The countries involved in the operation were Algeria, Angola, Benin, Cameroon, Côte d’Ivoire, Democratic Republic of the Congo, Gabon, Ghana, Kenya, Mauritius, Mozambique, Nigeria, Rwanda, Senegal, South Africa, Tanzania, Tunisia, Zambia, and Zimbabwe.

Massive Takedown of Cybercrime Networks

INTERPOL’s Operation Serengeti was launched to target a wide range of cybercrime activities, many of which have had devastating financial consequences for victims globally. According to INTERPOL, these activities affected over 35,000 individuals worldwide, resulting in financial losses of nearly $193 million. The operation successfully targeted cybercrime groups operating across the African continent and dismantled over 134,000 malicious networks used in fraudulent activities, data theft, and cyber extortion.

One of the key focuses of the operation was ransomware attacks, where criminals encrypt victims’ data and demand hefty ransom payments for its release. Additionally, the operation targeted Business Email Compromise (BEC) schemes, where cybercriminals impersonate company executives or employees to trick individuals into transferring funds to fraudulent accounts. Other illicit activities targeted included online credit card fraud, Ponzi schemes, investment scams, and multi-level marketing frauds, all of which have been on the rise in Africa and beyond.

Notable Arrests and Seizures

Among the high-profile arrests made during the operation were those linked to a massive online Ponzi scheme that defrauded victims of over $6 million. The scheme, which had spread across multiple African nations, saw eight people arrested in Senegal, including five Chinese nationals. A raid of their apartments uncovered a treasure trove of evidence, including 900 SIM cards, $11,000 in cash, phones, laptops, and copies of identification cards tied to 1,811 victims.

Another significant bust took place in Luanda, Angola, where authorities dismantled a virtual casino that had been targeting Brazilian and Nigerian gamblers. The operation was designed to defraud victims through an online platform that promised large winnings but ultimately exploited users by luring them into recruiting new members in exchange for a percentage of their winnings.

In addition to these arrests, law enforcement agencies across participating countries also seized significant amounts of stolen data, digital currencies, and illicit hardware used in cybercrime operations.

International Collaboration and Cybersecurity Partners

One of the highlights of Operation Serengeti was the strong cooperation between INTERPOL, national law enforcement, and the private sector. Group-IB, a leading global cybersecurity firm, played a crucial role in identifying malicious cyber activities across Africa. The firm reported the discovery of approximately 10,000 Distributed Denial-of-Service (DDoS) attacks emanating from servers based in Africa over the past year, as well as more than 3,000 phishing domains hosted in the region. Group-IB also provided intelligence on cybercriminals leaking stolen data on dark web forums.

Russian cybersecurity company Kaspersky also contributed to the operation by sharing crucial information on threat actors, ransomware attacks, and malware targeting African nations. Kaspersky provided up-to-date indicators of compromise (IoCs), which helped law enforcement agencies identify malicious infrastructure and dismantle cybercrime operations.

Valdecy Urquiza, INTERPOL’s Secretary General, praised the results of the operation and underscored the importance of international collaboration in combating cybercrime:

“From multi-level marketing scams to credit card fraud on an industrial scale, the increasing volume and sophistication of cybercrime attacks is of serious concern. Operation Serengeti shows what we can achieve by working together, and these arrests alone will save countless potential future victims from real personal and financial pain. We know that this is just the tip of the iceberg, which is why we will continue targeting these criminal groups worldwide.”

The Bigger Picture: Cybercrime in Africa

Africa has become a hotspot for cybercriminal activity, with many countries experiencing a surge in online fraud, data breaches, and digital extortion schemes. The rapid digitization of many African economies has provided criminals with more opportunities to exploit vulnerable systems and individuals. The success of Operation Serengeti highlights the growing importance of collaborative, cross-border efforts to combat cybercrime.

Experts have noted that while Serengeti marks a major victory, it is just one step in a larger battle against cybercrime. With the increasing sophistication of cyberattacks, it is crucial that law enforcement agencies, private cybersecurity firms, and international organizations continue to work together to stay ahead of the evolving threat landscape.

Looking Forward: The Fight Against Cybercrime

While Operation Serengeti dealt a significant blow to cybercriminal operations in Africa, INTERPOL has made it clear that this is just the beginning. As digital threats grow in complexity and scale, the need for ongoing international cooperation, advanced cybersecurity measures, and rapid law enforcement action will only become more urgent. With more operations like Serengeti on the horizon, the fight against cybercrime in Africa—and around the world—is far from over.

Authorities are encouraging individuals and businesses to remain vigilant and report any suspicious activity to local law enforcement or relevant authorities. As technology continues to advance, so too does the potential for cybercriminals to exploit it, but with concerted efforts, the global community can make strides toward safeguarding the digital landscape for all.

For more information on cybersecurity initiatives and updates from INTERPOL, visit INTERPOL’s official website.