| |
The multinational operation resulted in the arrest of 1,209 cybercriminals across Africa targeting nearly 88,000 victims globally, and the recovery of US$97.4-million. During the operation, investigators from 18 African countries and the United Kingdom also dismantled 11,432 malicious infrastructure and networks used to facilitate ransomware attacks, online scams, and business email compromise (BEC). These prominent threats were also highlighted by Group-IB in the recent INTERPOL Africa Cyberthreat Assessment Report.
As an INTERPOL Gateway Partner, Group-IB contributed circumstantial intelligence on a cryptocurrency investment scam, and details of the malicious infrastructure linked to the scheme. Group-IB also provided INTERPOL and its investigators with findings relating to the infrastructure linked to business email compromise (BEC) campaigns, as well as broader intelligence on malicious infrastructure hosted across the African region.
In the lead-up to “Operation Serengeti 2.0”, Group-IB also conducted a series of practical workshops on open-source intelligence tools and techniques, as well as knowledge sharing on dark web investigations. These workshops helped to enhance the skills and expertise of investigators, directly contributing to the effectiveness of the investigations and overall operational success.
Operational highlights: From crypto mining to inheritance scams
Authorities in Angola dismantled 25 cryptocurrency mining centres, where 60 Chinese nationals were illegally validating blockchain transactions to generate cryptocurrency. The crackdown identified 45 illicit power stations which were confiscated, along with cryptocurrency-mining and IT equipment worth more than US$37-million. The Angola government has since been earmarked the seized assets to support power distribution in vulnerable areas.
Zambian authorities dismantled a large-scale online investment fraud scheme, identifying 65,000 victims who lost an estimated US$300-million. The scammers lured victims into investing in cryptocurrency through extensive advertising campaigns promising high-yield returns. Victims were then instructed to download multiple apps to participate. Authorities arrested 15 individuals and seized key evidence including domains, mobile numbers and bank accounts. Investigations are ongoing with efforts focused on tracking down overseas collaborators.
Also in Zambia, authorities identified a scam centre and, in joint operations with the Immigration Department in Lusaka, disrupted a suspected human trafficking network. They confiscated 372 forged passports from seven countries.
Despite being one of the oldest-running internet frauds, inheritance scams continue to generate significant funds for criminal organizations. Officers in Côte d’Ivoire dismantled a transnational inheritance scam originating in Germany, arresting the primary suspect and seizing assets including electronics, jewellery, cash, vehicles and documents. With victims tricked into paying fees to claim fake inheritances, the scam caused an estimated USD 1.6 million in losses.
“Each INTERPOL-coordinated operation builds on the last, deepening cooperation, increasing information sharing and developing investigative skills across member countries. With more contributions and shared expertise, the results keep growing in scale and impact. This global network is stronger than ever, delivering real outcomes and safeguarding victims.”
Valdecy Urquiza - Secretary General of INTERPOL
“Cybercrime recognizes no borders, and its impact is truly global. The success of Operation Serengeti 2.0 demonstrates what can be achieved when nations stand together against this threat. By dismantling criminal infrastructures and bringing offenders to justice, we are not only protecting victims across Africa but also strengthening the resilience of the entire digital ecosystem. We are grateful to INTERPOL and all participating investigators for their tireless efforts and dedication for this operation. With the right threat intelligence, advanced tools, and knowledge sharing, Group-IB helps and will continue to help safeguard communities and businesses worldwide.”
Dmitry Volkov - CEO of Group-IB
INTERPOL’s “Operation Serengeti 2.0” (interpol.int) is a follow-up of “Operation Serengeti”, an INTERPOL and AFRIPOL-led operation conducted from 2 September to 31 October 2024 across 19 African countries. Group-IB provided investigators with information that led to the arrest of 1,006 suspects, and the dismantling of more than 134,000 malicious infrastructures and networks used by cybercriminals for investment-related scams, multiple scam schemes including those impersonating government officials, phishing, pig butchering and online casinos. The operation also identified over 35,000 victims linked to nearly US$193-million in global financial losses.
About Group-IB
Founded in 2003 and headquartered in Singapore, Group-IB (group-ib.com) is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company’s DNA, shaping its technological capabilities to defend businesses, citizens, and support law enforcement operations.
Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.
Group-IB’s decentralized and autonomous operational structure helps it offer tailored, comprehensive support services with a high level of expertise. We map and mitigate adversaries’ tactics in each region, delivering customized cybersecurity solutions tailored to risk profiles and requirements of various industries, including retail, healthcare, gambling, financial services, manufacturing, crypto, and more.
The company’s global security leaders work in synergy with some of the industry’s most advanced technologies to offer detection and response capabilities that eliminate cyber disruptions agilely.
Group-IB’s Unified Risk Platform (URP) underpins its conviction to build a secure and trusted cyber environment by utilizing intelligence-driven technology and agile expertise that completely detects and defends against all nuances of digital crime. The platform proactively protects organizations’ critical infrastructure from sophisticated attacks while continuously analyzing potentially dangerous behavior all over their network.
The comprehensive suite includes the world’s most trusted Threat Intelligence, The most complete Fraud Protection, AI-powered Digital Risk Protection, Multi-layered protection with Managed Extended Detection and Response (XDR), All-infrastructure Business Email Protection, and External Attack Surface Management.
Furthermore, Group-IB’s full-cycle incident response and investigation capabilities have consistently elevated industry standards. This includes the 77,000+ hours of cybersecurity incident response completed by our sector-leading DFIR Laboratory, more than 1,400 successful investigations completed by the High-Tech Crime Investigations Department, and round-the-clock efforts of CERT-GIB.
Time and again, its solutions and services have been revered by leading advisory and analyst agencies such as Aite Novarica, Gartner®, Forrester, Frost & Sullivan, KuppingerCole Analysts AG, and more.
Being an active partner in global investigations, Group-IB collaborates with international law enforcement organizations such as INTERPOL, EUROPOL and AFRIPOL to create a safer cyberspace. Group-IB is also a member of the Europol European Cybercrime Centre’s (EC3) Advisory Group on Internet Security, which was created to foster closer cooperation between Europol and its leading non-law enforcement partners.
|
pr[.]group-ib.com 
