Kaspersky Helps INTERPOL Track Down Cybercriminals Across Africa
Russian cybersecurity experts took part in the international operation Serengeti III.
Russian cybersecurity technologies are proving their value not only at home but also in international operations. That is why Russian experts are regularly called on to help combat cybercriminals across borders.
$105 Million in Losses Recovered
Kaspersky employees recently took part in a major INTERPOL-led campaign across Africa known as Operation Serengeti III. The Russian company provided cyberthreat intelligence and technical analysis, including information on network infrastructure used in botnets and distributed denial-of-service (DDoS) attacks, as well as details of phishing and malicious websites. The operation resulted in the arrest of 1,462 suspects and the recovery of $105 million in losses. Approximately 66,000 people had been victimized by the criminal activity.
Serengeti III ran from June 29 through August 31. INTERPOL received support from private companies and law enforcement agencies in 20 African countries and the United States. The operation focused on tackling online fraud, disrupting ransomware distribution, and preventing attacks designed to compromise business email communications.
“Cybercrime knows no borders. With modern technologies, attacks are being carried out on an unprecedented scale. Operation Serengeti III once again demonstrates that, under these conditions, international cooperation remains one of the most effective ways to combat criminals, recover stolen assets, and protect the global community from cyberthreats,” said Neal Jetton, INTERPOL’s Director of Cybercrime.
Cybercrime Requires a Collective Response
In Uganda alone, the operation dismantled two transnational criminal networks involving approximately 365 people. They are suspected of running online fraud schemes that stole money from users across Asia. In Angola, authorities shut down two illegal cryptocurrency mining centers and arrested nine suspects. In Nigeria, they apprehended a suspect accused of organizing a phishing campaign that exposed more than 2 million email addresses, which could then be used to gain access to various software applications. The operation also neutralized nearly 11,000 pieces of malicious infrastructure used in cybercrime. Several investigations launched as a result of Serengeti III are still underway.
Participation in international operations is particularly important for Russian organizations. Such participation gives them an opportunity to demonstrate the effectiveness of domestic cybersecurity technologies and raise their profile internationally. Russian experts also gain valuable hands-on experience that can later be used to improve their products and technologies.
International Operations Increasingly Rely on Russian Expertise
Kaspersky experts have been helping INTERPOL disrupt cybercriminal operations for several years. For example, during Operation Africa Cyber Surge II in 2023, which covered 25 African countries, the Russian company shared indicators of compromise, information about malicious servers and phishing domains, and details of fraudulent IP addresses. The intelligence helped law enforcement arrest 14 people.
In 2025, Kaspersky also supported Operation RedCard in Africa, which targeted online banking and investment fraud. The Russian experts shared intelligence on criminal infrastructure with their international counterparts, along with the results of an analysis of a malicious Android app distributed among users in the region. The operation led to the arrest of 306 suspects.
These are just a few examples of the cybersecurity operations Kaspersky employees have supported in recent years. Their involvement reflects growing international interest in Russian technologies, which are becoming an important tool in tackling threats that affect tens of thousands of people.
