Kaspersky supports INTERPOL’s Serengeti III operation targeting cybercrime across Africa

Kaspersky supported INTERPOL-coordinated Operation Serengeti III by providing threat intelligence and technical analysis intended to help law enforcement identify targets, map criminal networks, and support investigations across Africa.

The operation resulted in 1,462 arrests and the recovery of US$105 million, according to Kaspersky. Serengeti III ran from June 29 to August 31, 2026, and brought together investigators from 20 African countries and the United States alongside private-sector partners.

The operation focused on cyber-enabled fraud, ransomware, business email compromise, online scams, and digital extortion. Authorities identified nearly 66,000 victims targeted by the cybercriminal networks uncovered during the operation, while financial investigators estimated related losses at US$385 million.

Ahead of the operation, Kaspersky’s Threat Research expertise center provided intelligence on infrastructure used in botnet and DDoS attacks, as well as information about phishing campaigns and malicious URLs targeting users in Africa.

Neal Jetton, INTERPOL’s Director of Cybercrime, said cybercriminal networks operate across borders and increasingly use technology to target victims at scale. He said international cooperation remains one of the most effective ways to disrupt criminal networks, recover assets, and reduce digital harm.

Operation Serengeti III cases

In Uganda, authorities dismantled two transnational fraud networks and arrested 365 foreign nationals linked to online investment and pension fraud schemes targeting victims across Asia.

In Angola, investigators dismantled two illegal cryptocurrency mining centers and arrested nine suspects. In Nigeria, authorities arrested a suspect linked to a large-scale phishing and business email compromise operation that collected software credentials and approximately 2.1 million email addresses.

Beyond arrests and recovered funds, the operation disrupted nearly 11,000 malicious networks involved in cybercrime. Several investigations connected to Serengeti III remain active as authorities continue identifying suspects, tracing proceeds, and analyzing seized digital evidence.