INTERPOL has dismantled a phishing-as-a-service platform called SniperDz, which had been operational since at least 2015. This crackdown was part of Operation Ramz, conducted from October 2025 to February 2026 across 13 MENA countries, resulting in 201 arrests and the seizure of 53 servers. SniperDz provided tools and support for cybercriminals, including ready-made phishing kits and hosting.
The investigation noted significant operational security failures by the platform's operators, who publicly shared training materials, resulting in their identification and arrest. The operation highlights the need for intelligence-driven strategies in combating cybercrime.