Team Cymru Supports INTERPOL's Operation Ramz, Helping Disrupt Cybercrime Across ...

Team Cymru Supports INTERPOL’s Operation Ramz, Helping Disrupt Cybercrime Across the MENA Region

First-of-its-kind 13-country INTERPOL operation results in 201 arrests, identification of 3,867 victims, and seizure of 53 servers — supported by Team Cymru’s threat intelligence.

Team Cymru, a global leader in external threat intelligence and internet visibility, today announced its role as a private-sector partner in Operation Ramz , a first-of-its-kind cybercrime operation in the Middle East and North Africa (MENA) region coordinated by INTERPOL. Running from October 2025 to 28 February 2026, the operation brought together law enforcement agencies from 13 countries to investigate and disrupt malicious infrastructure, identify and arrest suspects, and prevent further victimisation across the region.

Working alongside INTERPOL and fellow private-sector partners Group-IB, Kaspersky, the Shadowserver Foundation and TrendAI, Team Cymru contributed threat intelligence and internet-scale visibility to help participating countries track illegal cyber activities and identify malicious servers underpinning phishing, malware and large-scale cyber scams targeting the region.

“Cybercrime is borderless, and the only effective response is one that is equally borderless. Operation Ramz is exactly that kind of response, law enforcement and trusted private-sector partners pooling intelligence, moving in concert, and dismantling the infrastructure that criminals depend on,” said Joe Sander, CEO, Team Cymru. “We are proud to have supported INTERPOL and the 13 participating MENA countries with the visibility needed to turn data into action, and we will continue investing in the partnerships that protect victims and hold offenders to account.”

Operation Ramz at a glance

The operation focused on neutralising phishing and malware threats, as well as tackling cyber scams that inflict severe cost to the region. Operational highlights released by INTERPOL include the dismantling of a phishing-as-a-service website in Algeria, the seizure of phishing tooling and banking data in Morocco, the disruption of a fraudulent investment platform in Jordan (where 15 individuals working the scams were determined to be victims of human trafficking), the remediation of compromised devices in Qatar, and the take-down of a vulnerable server hosting sensitive information in Oman.

“In a world where cybercriminals exploit the digital landscape without borders, Operation Ramz demonstrates the effectiveness of global collaboration,” said Neal Jetton, Director of Cybercrime, INTERPOL. “INTERPOL is dedicated to working with its member countries and private sector partners to take down malicious infrastructure, disrupt criminal groups and bring perpetrators to justice.”

Team Cymru’s contribution

Operation Ramz marked the first cyber operation of its scale coordinated by INTERPOL in the MENA region. Team Cymru’s support reflects its long-standing commitment to working with law enforcement worldwide — providing the external threat intelligence and internet-scale telemetry needed to map adversary infrastructure, attribute malicious activity, and convert technical signals into operationally actionable leads. Through partnerships of this kind, Team Cymru helps make it harder, more expensive and riskier for cybercriminals to operate.

Media Sydney Drayton Stealth PR for Team Cymru [email protected]

View source version on businesswire.com:

The articles, information, and content displayed on this webpage may include materials prepared and provided by third parties. Such third-party content is offered for informational purposes only and is not endorsed, reviewed, or verified by Morningstar.

Morningstar makes no representations or warranties regarding the accuracy, completeness, timeliness, or reliability of any third-party content displayed on this site. The views and opinions expressed in third-party content are those of the respective authors and do not necessarily reflect the views of Morningstar, its affiliates, or employees.

Morningstar is not responsible for any errors, omissions, or delays in this content, nor for any actions taken in reliance thereon. Users are advised to exercise their own judgment and seek independent financial advice before making any decisions based on such content. The third-party providers of this content are not affiliated with Morningstar, and their inclusion on this site does not imply any form of partnership, agency, or endorsement.