Team Cymru Supported INTERPOL’s Operation Serengeti 2.0 Cybercrime Crackdown

Summary

Team Cymru says it provided intelligence and technical support to INTERPOL’s Operation Serengeti 2.0, which reportedly led to 1,209 arrests, 11,432 malicious infrastructures dismantled and $97.4 million recovered.

Key points

The operation ran from June to August 2025, involving law enforcement from 18 African countries and the United Kingdom.
According to the article, INTERPOL reported 1,209 arrests, 11,432 malicious infrastructures dismantled and $97.4 million recovered in connection with cybercrime.
Operation targets included ransomware actors, investment fraud, human trafficking networks and business email compromise schemes.
The article says Angola dismantled 25 illegal crypto-mining centers, while Zambian authorities uncovered an investment fraud scheme that reportedly defrauded more than 65,000 people of an estimated $300 million.
Team Cymru says it used its Pure Signal telemetry platform to identify and categorize malicious infrastructure and provide validated intelligence to INTERPOL.

Article Details

Event Type: Coordinated international law enforcement operation targeting cybercrime networks across Africa.
Impact: Between June and August 2025, Operation Serengeti 2.0 reportedly led to 1,209 arrests, the dismantling of 11,432 malicious infrastructures, and recovery of $97.4 million connected to cybercrime. Reported country-level outcomes included Angola dismantling 25 illegal crypto-mining centers, Zambia uncovering an investment fraud scheme with more than 65,000 victims and estimated losses of $300 million, and Côte d’Ivoire shutting down an inheritance scam originating in Germany.

Vendors

Team CymruSupporting law enforcement in the fight against cybercrime is core to Team Cymru’s mission to Save and Improve Human Lives. That’s why we were proud to contribute to INTERPOL's Operation Serengeti 2.0, a coordinated law

Products

Pure Signalidentifying and categorizing malicious infrastructure using our own Internet telemetry data platform: Pure Signal. Our specialized Internet tagging team collaborated with our S2 Threat Research Team to research,

Countries

AngolaAngola dismantled 25 illegal crypto mining centers, confiscating mining rigs, IT equipment, and 45 unauthorized power stations worth more than $37 million.Côte d’IvoireA transnational inheritance scam originating in Germany was shut down by Côte d’Ivoire, recovering fraudulent documents, cash, jewelry, and electronics.GermanyA transnational inheritance scam originating in Germany was shut down by Côte d’Ivoire, recovering fraudulent documents, cash, jewelry, and electronics.United Kingdom2025, Operation Serengeti 2.0 brought together law enforcement from 18 African countries and the United Kingdom to target ransomware actors, investment fraud rings, human trafficking networks, and business email ZambiaZambia uncovered a massive online investment fraud scheme that defrauded over 65,000 victims out of an estimated $300 million USD.