Kaspersky Supports Interpol Operation Arresting 1,462
The international operation targeted ransomware, business email compromise, online fraud and digital extortion across Africa and beyond.
Updated on Nov. 2, 2026 in Financial Crime
Live Poll
Do you feel online scams and cybercrime pose a growing threat to you personally?
Kaspersky provided threat intelligence and technical analysis to INTERPOL's Operation Serengeti III, which ran from June 29 to August 31, 2026, and led to 1,462 suspects being arrested. Investigators recovered $105 million in criminal proceeds during the operation.
Why it matters
The operation involved investigative agencies from 20 African countries and the United States, and it identified approximately 66,000 victims with estimated financial damage of $385 million. Coordinated action across borders targets cybercrime networks that operate beyond any single national jurisdiction.
Operation Serengeti III resulted in 1,462 arrests and $105 million in recovered proceeds, with 365 foreign suspects arrested in Uganda and nine suspects arrested in an Angolan cryptocurrency mining case. INTERPOL says follow-up investigations are ongoing and additional suspects are still being identified.
The players
INTERPOL
The International Criminal Police Organization is an intergovernmental body that coordinates police cooperation among its member countries across borders.
Kaspersky
Kaspersky is a Russian cybersecurity company known for its threat intelligence research and antivirus products.
The details
Kaspersky shared data on network infrastructure used for botnets and DDoS attacks, along with information on phishing and malicious URLs targeting African users. In Uganda, two transnational criminal organizations were dismantled, and in Angola, two illegal cryptocurrency mining facilities were discovered.
Timeline
June 29 to August 31, 2026: Operation Serengeti III was conducted.
November 2, 2026: Kaspersky announced its participation in the operation.
Legal Context
The operation reflects a pattern of INTERPOL-coordinated cybercrime campaigns that pair national police agencies with private cybersecurity firms. Its focus on ransomware, business email compromise and digital extortion mirrors the priorities of these multinational enforcement efforts.
Individuals and businesses that use online banking, email and cryptocurrency face continued exposure to ransomware, phishing and business email compromise. Practical protections include verifying payment requests by phone and enabling multi-factor authentication on financial and email accounts.
The takeaway
Cybercrime losses are concentrated among victims who are targeted through routine email and payment channels. Verifying unexpected payment instructions before acting remains one of the simplest defenses against the scams highlighted in this operation.
Further reading
For more on related cases, see Financial Crime coverage.
Source note: This article includes information reported by 조선일보.
Live Poll
Do you feel online scams and cybercrime pose a growing threat to you personally?
