INTERPOL and partner nations have wrapped up a sweeping operation, dubbed Operation Secure, aimed at cracking down on data theft tools online. Between January and April 2025, authorities from 26 countries worked together to shut down thousands of suspicious IPs and websites tied to dozens of info-stealing malware strains.
Roughly four out of five of the identified systems were successfully neutralized. Authorities also confiscated dozens of servers and sifted through more than 100 GB of illicit material. Over 30 individuals were detained during the sweep.
Vietnam stood out in the operation, with law enforcement arresting 18 suspects and recovering SIMs, cash, and hardware. Sri Lanka and Nauru also made arrests. Meanwhile, Hong Kong’s cyber unit discovered over 100 servers being used to run scams and phishing attacks.
The campaign spanned much of Asia and the Pacific, involving India, Singapore, Japan, Fiji, and others. It highlights the growing need for global teamwork in disrupting cybercrime.
Just weeks earlier, another major takedown removed 2,300+ websites tied to Lumma Stealer malware. Last year, RedLine and MetaStealer faced similar action. These tools, sold on dark web forums, let criminals harvest saved logins, cookies, credit info, and crypto wallets from infected devices, often leading to fraud or ransomware later.
Cybersecurity company Group-IB helped trace stolen data flaws during the operation. CEO Dmitry Volkov warned that access credentials obtained by malware are often a backdoor to much deeper breaches.
