20,000 malware domains taken out by a massive police strike in 26 countries

Interpol has coordinated large international law enforcement operations have seen one of the biggest takedowns of malware networks ever.

Simultaneous strikes in 26 countries have brought over 20,000 domains offline and 32 suspects arrested…

Bleeding Computer The survey reported that it was adjusted by Interpol.

The operation, led by INTERPOL and carried out between January and April 2025, focused on the confusion of Infostealer malware groups that steal financial and personal data through widespread infections. The results of safe operations are important:

• Over 20,000 malicious IPS/domains linked to Infostealers
• 41 servers support seized information steeler operations
• 32 suspects have been arrested
• Confiscated 100 GB of data
• 216,000 victims notified

Infostealers is a name given to malware that aims to extract personal information from devices, such as logins, financial data, and Crypto wallet details. This information is sold on Dark Web, which is used to commit Idention theft and other forms of fraud.

Macs have not been a major target for malware for many years due to their device penetration and relatively low built-in security features, but have changed dramatically over the past few years as Mac users are considered a highly valuable target. Even Craig Federighi has stated that the level of Mac malware is “unacceptable.”

Despite Apple’s claims about the App Store safety, malware has also been discovered in iPhone apps.

Participating countries include Brunei, Cambodia, Fiji, Hong Kong, India, Indonesia, Japan, Kazakhstan, Kilibati, South Korea, Laos, Macau, Malaysia, Maldives, Nowru, Nepal, Papua New Guinea, Philippines, Samoa, Singapore, Solomon Island, Srinangka Island, and Vietnam.

Interpol cited the results from Hong Kong as an example.

Hong Kong Police analyzed over 1,700 intelligence provided by INTERPOL and identified 117 command and control servers hosted by 89 internet service providers. These servers were used by cybercriminals as central hubs to launch and manage malicious campaigns such as phishing, online scams, and social media scams.

Highlighted accessories

Photos by Michael advertise this