26-Nation Law Enforcement Initiative Takes Down 20,000 Malware Domains

26-Nation Law Enforcement Initiative Takes Down 20,000 Malware Domains

26-Nation Law Enforcement Initiative Takes Down 20,000 Malware Domains


**Massive Global Operation to Dismantle Infostealer Malware Network**

An extensive international law enforcement initiative, orchestrated by Interpol, has culminated in one of the largest dismantlings of a malware network ever recorded. This endeavor, designated Operation Secure, featured coordinated actions across 26 nations, leading to the closure of over 20,000 malicious domains and the apprehension of 32 individuals.

Conducted between January and April 2025, the operation specifically focused on infostealer malware collectives. These collectives are infamous for capturing financial and personal information from compromised devices. The accomplishments of Operation Secure are remarkable:

– More than 20,000 malevolent IPs/domains associated with infostealers eradicated
– 41 servers facilitating infostealer activities confiscated
– 32 individuals apprehended
– 100 GB of data seized
– 216,000 victims alerted

Infostealers represent a category of malware crafted to illicitly gather confidential information, including login details, financial records, and cryptocurrency wallet information. This acquired data is frequently traded on the dark web, where it can be exploited for identity theft and various fraudulent activities.

Traditionally, Macs were not primary targets for malware, attributed to their smaller market share and robust inherent security measures. However, this pattern has experienced a dramatic shift in recent years, as Mac users have turned into prime targets for cybercriminals. Even notable figures in the technology sector, like Craig Federighi, have recognized the mounting incidence of malware aimed at Macs.

Malware has also been found within iPhone applications, despite Apple’s claims about the security of its App Store. This underscores the persistent challenges in maintaining cybersecurity across all types of devices.

The nations that participated in this operation included Brunei, Cambodia, Fiji, Hong Kong, India, Indonesia, Japan, Kazakhstan, Kiribati, Korea, Laos, Macau, Malaysia, Maldives, Nauru, Nepal, Papua New Guinea, Philippines, Samoa, Singapore, Solomon Islands, Sri Lanka, Thailand, Timor-Leste, Tonga, Vanuatu, and Vietnam.

A clear illustration of the operation’s effectiveness can be observed in Hong Kong, where authorities examined over 1,700 pieces of intelligence supplied by Interpol. They pinpointed 117 command-and-control servers hosted by 89 internet service providers. These servers were employed by cybercriminals to initiate and oversee various nefarious campaigns, including phishing, online fraud, and scams on social media platforms.

The outcomes of Operation Secure signify a crucial advancement in the worldwide battle against cybercrime, particularly in addressing the dangers posed by infostealer malware.