In a significant victory against global cybercrime, INTERPOL recently coordinated a sweeping operation that dismantled Sniper Dz, a notorious phishing-as-a-service platform that had operated for nearly a decade. According to cybersecurity intelligence firm Group-IB, this coordinated effort involved law enforcement agencies from thirteen countries across the Middle East and North Africa region. The operation, codenamed Ramz, spanned five months from October 2025 to February 2026, culminating in 201 arrests including the platform's primary administrator, known only as Guedz.
Operation Ramz represents one of the most substantial disruptions of cybercriminal infrastructure in recent years. Sniper Dz had established itself as a sophisticated phishing-as-a-service provider, enabling criminals with limited technical expertise to launch attacks against individuals and organizations. The platform's decade-long operation had resulted in countless victims across multiple countries, with financial losses likely running into millions of dollars. By taking down this infrastructure, authorities have not only prevented future attacks but also gained valuable intelligence about the broader cybercriminal ecosystem.
The impact of this operation extends beyond the immediate arrests. For organizations and security teams worldwide, the disruption of Sniper Dz serves