Interpol takes down 20,000 malicious IPs and domains

Interpol has removed 20,000 malicious IP addresses and domain names linked to infostealer malware.

Law enforcement agencies from 26 countries joined forces to locate servers, map physical networks, and take down targeted servers.

In total, 41 servers were seized, as well as over 100GB of data. The Hong Kong Police analyzed over 1,700 documents provided by Interpol and identified 117 command-and-control (C2) servers hosted across 89 internet service providers.

Cybercriminals used these servers as central hubs to launch and manage malicious scamming campaigns, including phishing, online fraud, and social media scams. They also served as a means to distribute infostealers. This kind of malware is typically used to collect sensitive information like usernames, passwords, browser credentials, cookies, credit card details, and cryptocurrency wallet data.

During the operation, law enforcement authorities notified over 216,000 victims and potential victims so they could take countermeasures, like changing passwords or freezing accounts.

In addition, police officers arrested 32 suspects linked to illegal cyber activities, including 18 suspects from Vietnam, 12 individuals in Sri Lanka, and two men from Nauru.

Ahead of Operation Secure, which ran from January to April 2025, Interpol collaborated with private sector partners, including Group-IB, Kaspersky, and Trend Micro, to share critical intelligence information with cyber teams across Asia.

“Interpol continues to support practical, collaborative action against global cyber threats. Operation Secure has once again shown the power of intelligence sharing in disrupting malicious infrastructure and preventing large-scale harm to both individuals and businesses,” Neal Jetton, Director of Cybercrime at Interpol, said in a statement.

Operation Secure is a regional initiative in Asia and the South Pacific that aims to take down global cyber threats.

Brunei, Cambodia, Fiji, Hong Kong, India, Indonesia, Japan, Kazakhstan, Kiribati, Laos, Macau, Malaysia, Maldives, Nauru, Nepal, Papua New Guinea, Philippines, Republic of Korea, Samoa, Singapore, Solomon Islands, Sri Lanka, Thailand, Timor-Leste, Tonga, Vanuatu, and Vietnam participated in Operation Secure.