Blog

INTERPOL Targets Information Theft Campaign, Shutting Down 20,000 Malicious IPs and Domains

Singapore – Over 20,000 malicious IP addresses or domains associated with information theft were shut down in an INTERPOL-coordinated operation targeting cybercrime infrastructure.

During Operation Safe (January to April 2025), law enforcement agencies from 26 countries worked to locate servers, map physical networks, and conduct targeted strikes.

Prior to the operation, INTERPOL collaborated with private sector partners Group-IB, Kaspersky, and Trend Micro to produce cyber activity reports and share critical intelligence with cyber teams across Asia. These collaborative efforts ultimately resulted in the removal of 79% of suspicious IP addresses.

Participating countries reported the seizure of 41 servers and over 100 GB of data, as well as the arrest of 32 suspects linked to illegal cyber activities. Law enforcement agencies from 26 countries collaborated during Operation Safe.

Participating countries: Brunei, Cambodia, Fiji, Hong Kong, India, Indonesia, Japan, Kazakhstan, Kiribati, South Korea, Laos, Macau, Malaysia, Maldives, Nauru, Nepal, Papua New Guinea, Philippines, Samoa, Singapore, Solomon Islands, Sri Lanka, Thailand, Timor-Leste, Tonga, Vanuatu, Vietnam.