Security News

Cybersecurity news aggregator

INFO News Dark Reading

Operation Red Card 2.0 Leads to 651 Arrests in Africa

Read Full Article →

TechTarget and Informa Tech’s Digital Business Combine. Dark Reading Resource Library Black Hat News Omdia Cybersecurity Advertise NEWSLETTER SIGN-UP Cybersecurity Topics World The Edge DR Technology Events Resources CYBERSECURITY OPERATIONS CYBER RISK CYBERATTACKS & DATA BREACHES THREAT INTELLIGENCE NEWS Breaking cybersecurity news, news analysis, commentary, and other content from around the world, with an initial focus on the Middle East & Africa and the Asia Pacific Operation Red Card 2.0 Leads to 651 Arrests in Africa In the latest operation targeting cybercrime groups, African law enforcement agencies cooperated with Interpol and cybersecurity firms to recover more than USD 4.3 million. Robert Lemos,Contributing Writer February 25, 2026 4 Min Read SOURCE: CHRIS FRYATT VIA ALAMY STOCK PHOTO African law enforcement agencies continue to make headway against the cybercrime syndicates seeking to establish a foothold in various nations on the continent. In December and January, law enforcement officers from 16 African countries worked with Interpol and private companies to disrupt some major cybercriminal operations. Among them were investment fraud rings in Nigeria and Kenya, a mobile loan-fraud operation in Côte d’Ivoire, and a cybercrime syndicate in Nigeria that had gained access to the internal operations of a major telecommunications provider, Interpol stated in a Feb. 18 announcement. In total, the operation — dubbed Red Card 2.0 — accounted for 651 arrests and recovered more than $4.3 million. The international law enforcement coalition coordinated with local law enforcement agencies, providing resources, actionable intelligence, and training, says Enrique Hernandez Gonzalez, assistant director of cybercrime operations at Interpol. Related:Extra Extra! Announcing DR Global Latin America "Operation Red Card 2.0 served as a deterrence measure, sending a clear and unambiguous message to both active and potential offenders that such criminal activities will not be tolerated," he says. "Recent operations show strong engagement from African member countries, with increasing results in recent months, reflecting a clear commitment to tackling this threat." The latest operation follows a number of other announced law-enforcement surges, such as Operation Serengeti, Operation Sentinel, and the original Operation Red Card. Cybercrime has been growing problem in Africa, which has become a destination for Southeast Asia cybercrime syndicates looking to expand their operations. Both global and homegrown cybercriminals have also turned to AI services and large language models (LLMs) to improve their attacks. AI-crafted phishing attacks, for example, can achieve a 54% click-through rate, a significant 4.5x improvement compared to pre-AI campaigns. Public-Private Partnerships To combat the wave of cybercrime, African law enforcement agencies are working more closely together, nations are harmonizing their legal frameworks, and National Liaison Offices (NLOs) are standardizing on essential equipment and investigative methods. In addition, Interpol has teamed up with both local law enforcement and private companies to offer threat intelligence, analyze malware and threat campaigns, and identify the infrastructure being used by the cybercriminals. Trend Micro provided Interpol and its local law enforcement partners with threat intelligence as part of Operation Red Card 2.0, including analyses of loan app scams employed by cybercriminals, the company told Dark Reading. Related:Cyberattacks Likely Part of Military Operation in Venezuela Another partner, threat-intelligence provider Team Cymru, used network telemetry and other datasets to identify the infrastructure and activity connected to crypto-related scams and financial fraud. Overall, those cybercriminal operations siphoned off more than $45 million from consumers and businesses, says Jacomo Piccolini, community manager at Team Cymru. Their research confirmed a trend already documented by the broader security community — cyber-enabled fraud on the continent is increasingly organized, scalable, and transnational, Piccolini says. "What stands out is how effectively criminal networks are exploiting the rapid growth of mobile financial services and digital connectivity across African markets," he says. "This isn't opportunistic crime. It's structured, and the infrastructure supporting it crosses borders easily." For Community and Country Many local law enforcement groups continue to lack the resources needed to support investigations and turn intelligence into actionable insight, says Joshua Paul Ignacio, a senior threat researcher at Trend Micro. Beyond that, however, national governments need to educate users about cyber-fraud and other popular cybercriminal tactics, he says. Related:Afripol Focuses on Regional Cyber Challenges, Deepening Cooperation "Governments should prioritize raising awareness about safe internet practices and the common tactics used by cybercriminals," Ignacio says. "With the increasing number of internet users in the region, educating the public on how to navigate the internet safely is essential." Interpol's Hernandez agrees that the collaboration must extend beyond just helping law enforcement to perform better investigations. Interpol, for example, is also working on "active cyber offender prevention," where education and training aims to divert cybersecurity-skilled individuals from cybercrime to using their skills for their community and their country. "Cybercrime cannot be mitigated by involving only law enforcement agencies, it also needs support from all the different stakeholders in the cyber-ecosystem ... to work together and make Africa a safer region," he says. Among its other successes, Operation Red Card 2.0 highlights the importance of the the intelligence-sharing pipeline between the private sector and law enforcement. Done right, intelligence sharing can pay dividends, but often private companies and government agencies do not want to share, says Piccolini. "Cybercrime moves faster than any single organization can track on its own, and formalizing channels for private sector threat intelligence to reach law enforcement, as happened here, is something more countries should institutionalize rather than treat as a case-by-case arrangement," he says. Read more about: DR Global Middle East & Africa About the Author Robert Lemos Contributing Writer Veteran technology journalist of more than 20 years. Former research engineer. Written for more than two dozen publications, including CNET News.com, Dark Reading, MIT's Technology Review, Popular Science, and Wired News. Five awards for journalism, including Best Deadline Journalism (Online) in 2003 for coverage of the Blaster worm. Crunches numbers on various trends using Python and R. Recent reports include analyses of the shortage in cybersecurity workers and annual vulnerability trends. More Insights Industry Reports ThreatLabz 2025 Ransomware Report The Total Economic Impact™ Of Zscaler Private Access (ZPA) Zscaler ThreatLabz 2025 VPN Risk Report GigaOm Radar for CNAPP The Total Economic Impact™ of Google SecOps Access More Research Webinars Building a Robust SOC in a Post-AI World Retail Security: Protecting Customer Data and Payment Systems Rethinking SSE: When Unified SASE Delivers the Flexibility Enterprises Need Securing Remote and Hybrid Work Forecast: Beyond the VPN AI-Powered Threat Detection: Beyond Traditional Security Models More Webinars You May Also Like CYBERSECURITY OPERATIONS Prep is Underway, But 2026 FIFA World Cup Poses Significant Cyber Challenges by Robert Lemos, Contributing Writer SEP 26, 2025 CYBERSECURITY OPERATIONS Contrarians No More: AI Skepticism Is on the Rise by Rob Wright DEC 31, 2025 CYBERSECURITY OPERATIONS Cyberattacks Likely Part of Military Operation in Venezuela by Robert Lemos, Contributing Writer JAN 07, 2026 CYBERATTACKS & DATA BREACHES DeepSeek Breach Opens Floodgates to Dark Web by Emma Zaballos APR 22, 2025 Editor's Choice ENDPOINT SECURITY Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again byNate Nelson FEB 12, 2026 6 MIN READ CYBER RISK Those 'Summarize With AI' Buttons May Be Lying to You byJai Vijayan FEB 12, 2026 5 MIN READ CYBERATTACKS & DATA BREACHES Senegalese Data Breaches Expose Lack of Security Maturity byNate Nelson FEB 12, 2026 5 MIN READ 2026 Security Trends & Outlooks THREAT INTELLIGENCE Cybersecurity Predictions for 2026: Navigating the Future of Digital Threats JAN 2, 2026 CYBER RISK Navigating Privacy and Cybersecurity Laws in 2026 Will Prove Difficult JAN 12, 2026 ENDPOINT SECURITY CISOs Face a Tighter Insurance Market in 2026 JAN 5, 2026 THREAT INTELLIGENCE 2026: The Year Agentic AI Becomes the Attack-Surface Poster Child JAN 30, 2026 Download the Collection Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox. SUBSCRIBE Webinars Building a Robust SOC in a Post-AI World THURS, MARCH 19, 2026 AT 1PM EST Retail Security: Protecting Customer Data and Payment Systems THURS, APRIL 2, 2026 AT 1PM EST Rethinking SSE: When Unified SASE Delivers the Flexibility Enterprises Need WED, APRIL 1, 2026 AT 1PM EST Securing Remote and Hybrid Work Forecast: Beyond the VPN TUES, MARCH 10, 2026 AT 1PM EST AI-Powered Threat Detection: Beyond Traditional Security Models WED, MARCH 25, 2026 AT 1PM EST More Webinars White Papers Industry Report: AI, SOC, and Modernizing Cybersecurity The Threat Prevention Buyer's Guide: Find the best AI-driven threat protection solution to stop file-based attacks. Assessing Security Architectures: Zero Trust vs. Network-Centric Models 5 Steps to Stop Ransomware With Zero Trust 10 Ways a Zero Trust Architecture Protects Against Ransomware Explore More White Papers GISEC GLOBAL 2026 GISEC GLOBAL is the most influential and the largest cybersecurity gathering in the Middle East & Africa,

Share this article