Interpol Operation Synergia III Neutralizes 45,000 Malicious IPs

An international operation coordinated by Interpol has dismantled a vast network of cybercrime infrastructure, neutralizing more than 45,000 malicious IP addresses and servers used in phishing, malware and ransomware attacks. The effort, known as Operation Synergia III, involved law enforcement agencies from 72 countries and territories and ran from July 18, 2025, to January 31, 2026. It resulted in 94 arrests, the seizure of 212 electronic devices and servers, and ongoing investigations into more than 110 additional suspects.

The operation targeted the digital backbone of organized cybercrime groups, focusing on servers and addresses that enabled fraud, data theft and extortion schemes worldwide. Interpol transformed shared data into actionable intelligence, providing tactical support to national police forces and facilitating cross-border raids. Private sector cybersecurity firms, including GroupIB, Trend Micro and S2W, contributed technical expertise by tracking malicious domains, hosting infrastructure and malware distribution tactics.

Authorities uncovered a range of sophisticated scams during coordinated actions. In Macau, China, investigators identified over 33,000...