SniperDz Phishing-as-a-Service Platform Dismantled by INTERPOL

A coordinated investigation led by INTERPOL and the Algerian National Police resulted in the dismantling of SniperDz, a phishing-as-a-service (PhaaS) platform that operated since at least 2015. Group-IB played a crucial role in this operation, which led to the arrest of the primary developer and 201 additional arrests across 13 countries in the MENA region. SniperDz was responsible for over 140,000 phishing pages and targeted more than 30 global organizations, including PayPal and Netflix. The platform provided ready-made phishing kits and exploited social engineering techniques, impersonating public figures to lure victims. The investigation revealed significant operational security failures by the suspect, including the publication of video tutorials that exposed sensitive information. The operation also seized 53 servers and identified nearly 4,000 victims. This takedown marks a significant victory in combating cybercrime in the region.

Key Points: • SniperDz was a major PhaaS platform operating since at least 2015, facilitating phishing attacks. • The INTERPOL-led operation resulted in 201 arrests and the seizure of 53 servers across 13 countries. • Group-IB identified over 140,000 phishing pages linked to SniperDz, targeting major global brands.