Issue #195 | October 2026, Week 4

Over 1,400 suspected cybercriminals arrested; nearly 11K malicious networks disrupted across Africa

Jurisdiction

Africa

Threat Actor

Multiple threat actors

Incriminated Activity

Online scams, ransomware, email fraud, digital extortion

Estimated Damage

$385 million

Enforcement Action

Arrest

Case Status

Investigation pending

Law enforcement agencies from 21 countries have arrested 1,462 suspected cybercriminals and recovered more than $105 million in illicit funds during one of Africa’s largest cybercrime operations.

Coordinated by Interpol, the action, codenamed “Operation Serengeti III,” ran from 29 June to 31 August 2026, targeting cybercrime, including online scams, ransomware, email fraud and digital extortion.

The operation disrupted 10,909 malicious networks and identified 65,929 victims. Investigations linked criminal activities to financial losses exceeding $385 million.

In Uganda, authorities dismantled two international fraud networks and arrested 365 suspects linked to online investment and pension fraud.

In Angola, law enforcement agencies shut down two illegal cryptocurrency mining centers, arrested nine suspects and seized more than 2,000 mining devices. In Nigeria, police arrested a suspect linked to a large-scale phishing and email fraud operation involving about 2.1 million email addresses.

Interpol said the operation also targeted fraudulent vehicle imports, illegal mobile lending applications and cryptocurrency investment scams.

UAE police dismantle four international crime networks, arrest 33 suspects

Jurisdiction

The UAE

Threat Actor

Multiple criminal networks

Incriminated Activity

Cybercrime, fraud, data trafficking, violent assaults

Estimated Damage

Not disclosed

Enforcement Action

Arrest

Case Status

Investigation pending

The United Arab Emirates has dismantled four interconnected international criminal networks and arrested 33 suspects from 12 nationalities in an operation named “End of Battle”.

The networks were involved in cybercrime, money laundering, digital wallet theft, fraud, extortion, data trafficking and violent assaults.

The operation was led by the Digital Crimes Department of Sharjah Police, which uncovered the groups’ hidden online systems. The suspects reportedly used encrypted platforms and digital networks that changed every eight hours to hide their identities and avoid detection.

Authorities secured assets worth more than 65 billion dirhams ($17.7 billion), seized and confiscated more than 200 million dirhams ($54.5 million), and investigated over 3,000 digital wallets.

Authorities said the arrests included key leaders of the criminal networks.

Moscow police detain suspected DataSuckers hackers

Jurisdiction

Russia

Threat Actor

Individual

Incriminated Activity

Hacking

Estimated Damage

Not disclosed

Enforcement Action

Arrest

Case Status

Investigation pending

Russian police have detained three suspected members of the DataSuckers hacking group, accused of cyber-attacks on major businesses in Russia and Ukraine.

A Moscow court placed 19-year-old Denis Fridman under house arrest until December 8 over a breach involving popular Russian restaurant chain Dodo Pizza. The attack reportedly exposed customer records linked to hundreds of millions of orders over 15 years.

According to Russian media reports, four people are suspected of being involved in the group. Two other suspects have also been detained; a fourth suspect remains at large.

Police reportedly tracked Fridman after he accidentally exposed his IP address while accessing data stolen from Dodo Pizza. The hackers allegedly gained access to the company's systems using login details found on GitHub.

The stolen data was reportedly offered for sale on the Dark Web, with the group receiving $100,000 for the information. DataSuckers has also claimed responsibility for attacks on Russian tour operator Tez Tour and Ukrainian supermarket chain ATB. The group demanded $400,000 from ATB and threatened to publish information it claimed to have stolen from millions of customers.

The group describes itself as financially motivated and uses a public Telegram channel to announce attacks and publish details of its alleged operations.

Nigerian man sentenced to eight years in US hacking and fraud case

Jurisdiction

The US

Threat Actor

Individual

Incriminated Activity

Computer intrusions; wire fraud

Estimated Damage

Over $2.5 million

Enforcement Action

Arrest

Case Status

Prison imprisonment

A Nigerian national has been sentenced to eight years in prison for hacking US tax preparation businesses and stealing customers’ personal information to file fraudulent tax returns.

Chukwuemeka Victor Amachukwu and his co-conspirators targeted businesses across the United States between 2019 and 2021. The group stole tax and personal data belonging to at least 800 customers.

Using the stolen information, the scammers filed tax refund claims worth $8.4 million and received about $2.5 million. They also obtained around $819,000 through fraudulent applications to a US government loan program.

Amachukwu was extradited from France to the United States in August 2025 and pleaded guilty to conspiracy to commit computer intrusions and wire fraud.

In addition to the prison sentence, the court ordered him to serve one year of supervised release, pay $3.6 million in restitution and forfeit nearly $11 million.

Pakistani man arrested over a $126M US postal fraud

Jurisdiction

Pakistan

Threat Actor

Individual

Incriminated Activity

Wire fraud

Estimated Damage

$126 million

Enforcement Action

Arrest

Case Status

Investigation pending

Pakistan’s cybercrime agency has arrested a man accused of running a counterfeit postage business that allegedly caused $126 million in losses to the US Postal Service.

Faheem Akram, 33, from Khanewal, Pakistan, is accused of operating LabelsBank[.]com, a website that sold fake US shipping labels since 2023. He was indicted by a federal grand jury in Florida in September 2026.

According to US prosecutors, more than 5,200 customers bought over 5.1 million counterfeit shipping labels, usually for $2 each. The labels allowed customers to send packages at prices far below official postal rates, regardless of their weight, size or destination.

Authorities have now shut down the website. Earlier this month, the US Postal Inspection Service offered a reward of up to $100,000 for information leading to Akram’s arrest.

Akram faces charges including conspiracy to defraud the US government, selling counterfeit postage labels and wire fraud. If convicted, he could face up to five years in prison on the conspiracy and counterfeit postage charges and up to 20 years for each wire fraud count.

It remains unclear whether Akram will be extradited to the United States or face trial in Pakistan.