Interpol Takes Down Over 20,000 IPs in Global Malware Crackdown

By

16 hours agoFri Jun 13 2025 07:41:34

Interpol-Takes-Down-Over-20,000-IPs-in-Global-Malware-Crackdown

Reading Time: 2 minutes

  • Law enforcement and cybersecurity firms have dismantled over 20,000 malicious IPs and domains tied to crypto‑wallet infostealer malware
  • Operation Secure has resulted in 32 arrests and the seizure of 41 servers, with more than 100 GB of compromised data recovered
  • Authorities have notified over 216,000 victims, warning them to secure credentials and safeguard digital assets

In a trans‑Pacific strike against cyber‑attacks on crypto wallets, international agencies joined forces with security firms to neutralize thousands of malicious digital endpoints. The coordinated takedown led to dozens of arrests across Asia and prompted a massive global alert for users to secure their cryptocurrency holdings. With recovered crypto‑wallet data among the loot, the operation highlights both the scale of the threat and the importance of collective defense measures.

Crypto Wallets in the Crosshairs

During Operation Secure, INTERPOL worked with firms like Group‑IB, Kaspersky, and Trend Micro to trace and eliminate server networks harvesting crypto‑wallet credentials. The mission succeeded in taking down more than 79% of flagged IPs, dismantling 41 rogue servers, and confiscating over 100 GB of data, including stolen crypto‑related logs.

In an almost unprecedented show of global collaboration, law enforcement across 26 countries arrested 32 suspects, including 18 from Vietnam. Vietnamese police found over USD 11,500 in cash, SIM cards, and business paperwork tied to operations selling corporate accounts used in crypto‑fraud schemes.

Additional raids in Sri Lanka, Nauru, and Hong Kong uncovered 117 command-and-control servers and dozens of compromised wallets, some containing tokens and coin logs from popular store apps.

Victims Informed of Risks

Following the raids, INTERPOL has issued warnings to over 216,000 users worldwide, many of whom may have been targeted via infostealer malware deployed through phishing or malicious extensions designed to siphon crypto‑secrets. “These stolen credentials often serve as the starting point for larger crypto‑thefts and fraud,” said Neal Jetton, Director of Cybercrime at INTERPOL. “By dismantling this infrastructure, we’ve disrupted major criminal pipelines.”

Leave a Reply

Your email address will not be published. Required fields are marked *