International law enforcement announced Thursday that they detained 31 suspected cybercriminals and identified 1,300 malicious servers that they used to carry out phishing attacks and distribute malware.

Interpol’s so-called Operation Synergia, which ran from September to November 2023, “was launched in response to the clear growth, escalation and professionalization of transnational cybercrime and the need for coordinated action against new cyber threats,” Interpol said in a statement on Thursday.

Nearly 60 law enforcement agencies and several private companies were involved in the operation. They took down 70% of the identified command-and-control (C2) servers — mostly in Europe, Hong Kong and Singapore — while others are currently under investigation.

In addition to the 31 arrests, Interpol identified an additional 70 suspects responsible for phishing attacks, spreading banking malware, and distributing ransomware.

Interpol said that during the investigation they uncovered major cybercrime groups but did not specify which ones. The agency did not immediately respond to a request for comment.

“The results of this operation, achieved through the collective efforts of multiple countries and partners, show our unwavering commitment to safeguarding the digital space,” said Bernardo Pillot, assistant director of the Interpol Cybercrime Directorate.

“By dismantling the infrastructure behind phishing, banking malware, and ransomware attacks, we are one step closer to protecting our digital ecosystems and a safer, more secure online experience for all,” he added.

Daryna Antoniuk

Daryna Antoniuk is a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in Eastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for Forbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.