Interpol's Serengeti III operation led to 1,462 arrests across Africa and the recovery of more than $105 million linked to cybercrime. In Uganda, fraud rings used call-center scripts, fake trading platforms, and fraudulent websites to persuade pensioners in Asia to invest in fictional opportunities. Authorities also reported phishing, business email compromise, messaging-app investment scams, and social-media fraud operations in several countries.
Interpol's Serengeti III operation led to 1,462 arrests across Africa, disrupted more than 10,000 malicious networks, and recovered over $105 million tied to cybercrime. The cases span multiple countries and scam types, from investment fraud targeting retirees to phishing operations aimed at corporate credentials.
In Uganda, fraud rings operated call centers using scripts, fake trading platforms, and fraudulent websites to persuade pensioners in Asia to put money into fictional investments. The pretext relied on a caller posing as an investment adviser, directing the victim to an unverified platform to deposit funds.
Separately, Nigerian authorities arrested a suspect accused of running a phishing and business email compromise operation that harvested software credentials and amassed roughly 2.1 million email addresses. Another Nigerian case involved an investment scam promoted through messaging apps that traced more than $2.4 million in suspected criminal proceeds, much of it laundered through cryptocurrency.
Other disrupted schemes included a malicious mobile-loan application in Tanzania and a vehicle-import fraud network promoted through social media in Gabon.
Treat unsolicited investment calls and messages as high risk, especially when the sender directs you to an unfamiliar trading platform. Never provide software account credentials in response to an unexpected email; navigate directly to the known service instead of using links in messages. Independently verify any investment firm or offer before sending funds, and apply the same scrutiny to financial requests made through social media or messaging apps, since fraud networks can use those platforms to promote deceptive offers.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
It is an African law enforcement operation that resulted in 1,462 arrests, disrupted more than 10,000 malicious networks, and recovered over $105 million linked to cybercrime.
They ran call centers using scripts, fake trading platforms, and fraudulent websites to persuade pensioners in Asia to invest in fictional opportunities.
Authorities also reported phishing and business email compromise schemes, messaging-app investment scams, a mobile-loan app scheme in Tanzania, and a vehicle-import fraud network promoted via social media in Gabon.
Avoid entering software credentials in response to unexpected emails and instead navigate directly to the known service rather than clicking message links.
“We have an investment opportunity through our trading platform.” Sound familiar? In Uganda, scripted call centers directed pensioners in Asia to fake trading websites. The caller sounded helpful; the investment didn't exist. That's the trick: a convincing dashboard isn't proof your money is invested. The unsolicited call and unverified website are the red flags. Before depositing anything, independently verify the firm using contact details you find yourself.
INTERPOL’s Operation Serengeti III arrested 1,462 suspects across 21 countries targeting fraud, phishing, business email compromise, ransomware, and digital extortion. In Uganda, investigators found scam call centres using prepared scripts and fake trading platforms to persuade people, including…
Research from Cisco Talos and CrowdStrike says criminals are building AI into everyday operations, from writing malicious code to scaling fraud infrastructure. The reports describe real prompt logs where attackers use simple “authorized testing” claims to trick AI tools into helping them, plus…
Microsoft disrupted “EvilTokens,” a subscription cybercrime service that stole Microsoft account access using device-code phishing and then used AI-style automation to rapidly mine victims’ inboxes for payment and org-chart details. The goal was to quickly craft believable payment-fraud messages…
Microsoft says it disrupted the “EvilTokens” phishing-as-a-service platform, which it links to compromises of over 12,000 inboxes across more than 10,000 organizations. The service used AI to tailor phishing emails to a victim’s role and to analyze compromised inboxes to identify trusted…
Microsoft and partners disrupted “EvilTokens,” a phishing service that helped criminals break into more than 12,000 mailboxes across 10,000+ organizations. Victims were tricked into entering an authentication code on a real Microsoft sign-in page, letting attackers capture access tokens and get…
Microsoft reports that the EvilTokens phishing-as-a-service platform helped criminals compromise thousands of organizations by tricking users into completing a legitimate Microsoft “device code” login. The lure drives victims to enter a short code at microsoft.com/devicelogin, which unknowingly…
