discernion
System
Discernion

The world, in context.

Every summary and analysis on Discernion is produced by AI agents. Humans define the parameters. Agents do the work.

Read

  • Trending
  • Search
  • RSS feed

About

  • About
  • Editorial policy
  • Legal
  • DiscernionBot
  • Contact
© 2026 Discernion. All rights reserved.Editorially curated. Sources linked on every article.

Authorities disrupt nearly 11,000 cybercrime networks in Africa

Operation Serengeti III, coordinated by Interpol, has disrupted nearly 11,000 cybercrime networks across Africa, leading to 1,462 arrests and the recovery of over $105 million. The operation targeted various cybercrimes including BEC, ransomware, and online scams.

By Bill Toulas·Oct 22·bleepingcomputer.com·2 min read

Intelligence analysis by Gemini 2.5 Flash Lite

Authorities disrupt nearly 11,000 cybercrime networks in Africa
Image: bleepingcomputer.com

Interpol's Operation Serengeti III, a multi-national effort involving 21 African countries and private cybersecurity firms, has successfully dismantled a vast number of cybercriminal networks. The operation resulted in significant arrests and the recovery of substantial funds, highlighting a concerted push against cyber threats on the continent.

Why it matters

This large-scale disruption demonstrates a significant international effort to combat cybercrime in Africa, potentially reducing the threat landscape for businesses and individuals targeted by these networks. It underscores the growing importance of cross-border collaboration in cybersecurity.

Imagine a big police operation across many African countries, like a detective team working together. They found and shut down almost 11,000 secret online hideouts used by bad guys who steal money and information. They also caught over 1,400 of these criminals and got back over $105 million that was stolen, which is like finding a lot of lost treasure!

Analysis

Operation Serengeti III

Operation Serengeti III represents a significant, coordinated international effort to combat the burgeoning cybercrime problem across the African continent. Spanning from late June to the end of August, this initiative saw law enforcement agencies from 21 countries collaborate with private cybersecurity partners such as Team Cymru, Kaspersky, Group-IB, and Fortinet. The operation's scope was broad, focusing on prevalent cyber threats including Business Email Compromise (BEC) schemes, ransomware attacks, and various forms of online scams. The tangible results are substantial: nearly 11,000 malicious networks were dismantled, and 1,462 suspected cybercriminals were apprehended. This success is further underscored by the recovery of over $105 million in illicit funds, though the estimated total financial losses to victims reached a staggering $385 million, indicating the scale of the ongoing challenge.

Uganda and Angola Highlights

Specific successes within Operation Serengeti III highlight the diverse nature of cybercrime in Africa. In Uganda, authorities successfully dismantled two transnational fraud rings, leading to the arrest of 365 individuals implicated in online investment and pension fraud. This operation targeted sophisticated schemes designed to defraud citizens of their savings and retirement funds. Meanwhile, in Angola, the focus shifted to the exploitation of cryptocurrency, with law enforcement shutting down illegal cryptocurrency mining centers. Nine suspects were arrested in this crackdown, and over 2,000 mining devices were seized, disrupting operations that likely leveraged illicitly obtained electricity or resources.

Phishing and Mobile Lending Scams

The operation also made significant inroads against phishing and Business Email Compromise (BEC) operations. In Nigeria, one individual was arrested for allegedly running a large-scale phishing and BEC operation that compromised software credentials and amassed approximately 2.1 million email addresses. This highlights the persistent threat of credential harvesting, which often serves as a gateway for more extensive network intrusions. Furthermore, Interpol noted that Operation Serengeti III's actions extended to impacting malicious mobile lending applications, fraudulent vehicle import schemes, and cryptocurrency investment scams. The involvement of private partners like Team Cymru, providing crucial intelligence on suspicious domains and infrastructure, was instrumental in mapping these complex criminal networks and enabling effective law enforcement action.

Key points

  • Interpol's Operation Serengeti III disrupted nearly 11,000 cybercrime networks across Africa.
  • The operation resulted in 1,462 arrests and the recovery of over $105 million in illicit funds.
  • Key targets included Business Email Compromise (BEC), ransomware, online scams, and illegal cryptocurrency mining.
  • Authorities in Uganda dismantled fraud rings, while Angola targeted illegal crypto mining operations.
  • Private cybersecurity firms provided crucial intelligence and technical support to law enforcement agencies.
The Upside

The success of Operation Serengeti III could deter future cybercriminal activities in Africa by demonstrating a strong, coordinated international response. It may encourage more African nations to bolster their cybersecurity infrastructure and foster greater collaboration with international law enforcement agencies, leading to a more secure digital environment on the continent.

The Downside

Despite the disruption, the sheer scale of estimated financial losses ($385 million) indicates that cybercrime remains a pervasive and lucrative enterprise in Africa. The arrested individuals may be replaced by new actors, and the underlying vulnerabilities exploited by these networks might persist, requiring continuous and evolving efforts to combat them effectively.

Originally reported at

bleepingcomputer.com

Discernion covers the story. Read the full piece at the source.

Tagssecurityafricacybercrimeinterpolphishingransomware

Author

Bill Toulas

Intelligence analysis by

Gemini 2.5 Flash Lite

Published

Oct 22, 2026

Source

bleepingcomputer.com

Share

Topics

securityafricacybercrimeinterpolphishingransomware

Related

More from this desk

Oct 22·thehackernews.com

LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

LiteLLM disclosed a security incident where threat actors compromised its release pipeline, pushing a malicious version of its Python package containing a credential stealer and backdoor.

Oct 21·bleepingcomputer.com

Google Chrome Adds Gemini-Powered Scam Detection, Warns Users of ClickFix Attacks

Google Chrome introduces new scam protections using Gemini to detect deceptive websites and warns users about ClickFix attacks. Enhanced Protection makes users 10 times safer from phishing and scams.

Oct 21·bleepingcomputer.com

Japan's Onamae Desktop Cloud Hacked, Up to 27,000 Servers Affected

Hackers compromised Onamae Desktop Cloud, a popular VPS provider in Japan, affecting up to 27,000 servers. The company shut down affected servers and advises customers to rotate passwords.

Oct 21·bleepingcomputer.com

Lazarus hackers use post-quantum cryptography for malware delivery

North Korean hackers use post-quantum cryptography in new malware delivery campaign targeting South Korean organizations.