INTERPOL’s recent Operation Serengeti has resulted in the arrest of 1,006 individuals across 19 African nations, alongside the dismantling of 134,089 malicious networks. The operation, which took place between September 2 and October 31, 2024, was a large-scale effort targeting a range of cybercrimes including ransomware attacks, business email compromise (BEC), digital extortion, and online scams. The coordinated action, supported by various law enforcement agencies, has disrupted major cybercriminal operations that have been causing significant financial harm across the globe.
The participating countries included Algeria, Angola, Benin, Cameroon, Côte d’Ivoire, the Democratic Republic of the Congo, and several others. The operation exposed a series of sophisticated cybercrime tactics, ranging from Ponzi schemes and investment frauds to online credit card fraud. More than 35,000 victims were affected by these operations, leading to a staggering financial loss of nearly $193 million. The scale of the operation emphasizes the widespread nature of cybercrime in the region and the urgent need for global collaboration to combat these criminal activities.
Among the most notable busts during Operation Serengeti was the takedown of a $6 million online Ponzi scheme based in Senegal, where eight suspects, including five Chinese nationals, were arrested. Authorities uncovered evidence including 900 SIM cards, $11,000 in cash, and a trove of personal data connected to thousands of victims. In another significant arrest, a virtual casino operating in Luanda, Angola, was shut down for defrauding Brazilian and Nigerian gamblers. These operations were designed to exploit victims through deceptive schemes that promised lucrative returns.
Private sector cybersecurity companies, such as Group-IB and Kaspersky, played a crucial role in the operation by providing intelligence on threat actors and malicious infrastructure. Group-IB reported detecting over 10,000 DDoS attacks originating from Africa-based servers, as well as identifying over 3,000 phishing domains. Kaspersky contributed by sharing up-to-date data on ransomware and malware targeting the region, further assisting law enforcement in their mission to dismantle these criminal networks. The operation’s success highlights the growing sophistication of cybercrime in Africa and underscores the need for continued international cooperation to safeguard global cybersecurity.
Reference: