INTERPOL Arrests 574 Suspects in Major Cybercrime Crackdown Across Africa
- Securityish
- Threats & Incidents
Quick Summary
INTERPOL’s Operation Sentinel resulted in the arrest of 574 suspects across 19 African countries and the recovery of $3 million from cybercriminals. The operation, conducted between October 27 and November 27, 2025, targeted business email compromise, digital extortion, and ransomware. Notably, a ransomware attack in Ghana encrypted 100 terabytes of data and stole around $120,000, highlighting the increasing sophistication of cyber threats in the region.
The Securityish Brief
INTERPOL’s Operation Sentinel, running from October 27 to November 27, 2025, led to the arrest of 574 individuals involved in cybercrime across 19 African nations. This coordinated effort focused on combating business email compromise (BEC), digital extortion, and ransomware, recovering $3 million in the process. Participating countries included Benin, Botswana, Burkina Faso, Cameroon, Chad, Congo, Djibouti, Democratic Republic of the Congo, Gabon, Ghana, Kenya, Malawi, Nigeria, Senegal, South Africa, South Sudan, Uganda, Zambia, and Zimbabwe.
During the operation, over 6,000 malicious links were taken down, and six ransomware variants were decrypted, although their names were not disclosed. The financial impact of the investigated incidents exceeded $21 million. In Ghana, authorities arrested suspects linked to a ransomware attack that encrypted 100 terabytes of data and stole approximately $120,000.
Additionally, a cyber fraud network operating in Ghana and Nigeria was dismantled, which defrauded over 200 victims of more than $400,000 through fake websites and mobile apps impersonating popular fast-food brands. This operation also resulted in the seizure of 100 digital devices and the takedown of 30 fraudulent servers.
Neal Jetton, INTERPOL’s director of cybercrime, emphasized the growing scale and sophistication of cyber attacks in Africa, particularly targeting critical sectors like finance and energy. Operation Sentinel is part of the African Joint Operation against Cybercrime (AFJOC), aimed at enhancing national law enforcement capabilities to disrupt cybercriminal activities.
In a related case, Artem Aleksandrovych Stryzhak, a 35-year-old Ukrainian national, pleaded guilty in the U.S. for his role in Nefilim ransomware attacks. He was arrested in Spain in June 2024 and extradited to the U.S. in April 2025. Stryzhak and his associates targeted companies with significant annual revenues, using a double extortion model to pressure victims into paying ransoms.
Implications for Cybersecurity
The recent arrests and operations underscore the urgent need for enhanced cybersecurity measures across Africa and beyond. Organizations should remain vigilant against BEC and ransomware threats, which are becoming increasingly sophisticated.
Users and organizations should be aware of the tactics used by cybercriminals, such as impersonating reputable brands to defraud victims. It is crucial to verify the authenticity of communications and transactions, especially those involving financial information.
As cyber threats continue to evolve, businesses must invest in robust cybersecurity training and incident response plans to mitigate risks associated with ransomware and other cyber attacks.
Key Takeaways
- Regularly update your cybersecurity protocols to protect against evolving threats like ransomware and BEC.
- Verify the authenticity of emails and communications, especially those requesting sensitive information or payments.
- Implement employee training programs to recognize and respond to phishing and other cyber threats.
- Monitor financial transactions closely for any signs of fraud or unauthorized activity.
- Consider investing in cybersecurity insurance to mitigate financial losses from potential cyber incidents.
Key Terms & Concepts
- Business Email Compromise (BEC): In this article, BEC refers to a type of cybercrime where attackers impersonate a legitimate business to defraud individuals or organizations.
- Ransomware: Ransomware is a type of malicious software that encrypts a victim’s data, demanding payment for its release.
- Double Extortion Model: This model involves cybercriminals demanding a ransom for data decryption and threatening to publish stolen data if the ransom is not paid.
- Operation Sentinel: Operation Sentinel is an INTERPOL-led initiative aimed at combating cybercrime across Africa.
- African Joint Operation against Cybercrime (AFJOC): AFJOC is a collaborative effort to enhance the capabilities of law enforcement agencies in Africa to tackle cybercrime.
Read the original article here: https://thehackernews.com/2025/12/interpol-arrests-574-in-africa.html
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
