MEDIUMMalware
Global

INTERPOL ‘Operation Ramz’ seizes 53 malware, phishing servers

·Source: BleepingComputer

Updated:

Executive Summary

More than 200 individuals were arrested for cybercrime activities during INTERPOL's Operation Ramz, which focused on the Middle East and North Africa. [...]

Analysis

More than 200 individuals were arrested for cybercrime activities during INTERPOL's Operation Ramz, which focused on the Middle East and North Africa. [...]
Source Attribution

Originally published by BleepingComputer on May 18, 2026.

Related Threats

MEDIUMMalware

Legacy Microsoft Utility Fuels New Wave of Malware

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/legacy-microsoft-utility-fuels-new-wave-malware-image_small-8-a-31716.jpg" align=right hspace=4><b>Researchers Link MSHTA Windows Utility to Lumma Stealer, ClickFix Campaigns</b><br>Cybercriminals continue abusing Microsoft’s legacy MSHTA utility to deliver malware, with researchers saying that the default-enabled Windows componen

Bank Info Security
MEDIUMMalware

Legacy Windows Tool MSHTA Fuels Surge in Silent Malware Attacks

Attackers are increasingly abusing Microsoft’s decades-old MSHTA utility to stealthily deliver stealers, loaders, and persistent malware through phishing, fake software downloads, and LOLBIN-based attack chains. The post Legacy Windows Tool MSHTA Fuels Surge in Silent Malware Attacks appeared first on SecurityWeek .

SecurityWeek
MEDIUMMalware

From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threat

Cisco Talos has uncovered a BadIIS variant — identifiable by its embedded "demo.pdb" strings — that functions as commodity malware, likely sold or shared among multiple Chinese-speaking cyber crime groups operating under a malware-as-a-service (MaaS) model for continuous monetization.

Cisco Talos