Operation Ramz is a threat campaign tracked across 3 threat clusters and 18 intelligence report mentions on ThreatCluster. First observed May 18, 2026; most recent activity June 11, 2026.
A coordinated investigation led by INTERPOL and the Algerian National Police resulted in the dismantling of SniperDz, a phishing-as-a-service (PhaaS) platform that operated since at least 2015. Group-IB played a crucial…
On May 19, 2026, Microsoft disrupted Fox Tempest, a malware-signing-as-a-service (MSaaS) operation that provided over 1,000 fraudulent code-signing certificates to cybercriminals, enabling them to disguise malware as…
Operation Ramz, coordinated by INTERPOL, resulted in 201 arrests and identified 3,867 victims across 13 MENA countries from October 2025 to February 2026. The operation focused on dismantling phishing infrastructure,…