logo

Infostealer Ring Bust-up Takes Down 20,000 Malicious IPs

ID: 2aa52f99-d48c-55f3-8500-32cc1c55c174

STIX ID: report--2aa52f99-d48c-55f3-8500-32cc1c55c174

Feed Name: Dark Reading

Threat Score
70/100

Date Published: 2025-06-11

Date Updated: 2026-04-21

Author: Becky Bracken

...
...

Interpol's Operation Secure disrupted a transnational infostealer operation spanning 26 countries, resulting in 32 arrests (including 18 in Vietnam), seizure of 41 servers and over 100 GB of data, and neutralization of roughly 79% of suspicious IPs and domains. The criminal group operated malware-as-a-service using known infostealers (Lumma, Risepro, Meta Stealer) to harvest browser credentials, cookies, credit card information and cryptocurrency wallet data via phishing and social-engineering, with private cybersecurity firms helping trace C2 infrastructure and compromised accounts.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.