International agency release

# 20,000 malicious IPs and domains taken down in INTERPOL infostealer crackdown

INTERPOL, June 11, 2025. Establishes the 26-country scope, 20,000+ IP/domain figure, 41 servers seized, and 32 arrests..

**Source type:** International agency release

**Published:** June 11, 2025

**Research grade:** P2

**Used in entries:** 2

## Bibliographic record

**Publisher:** INTERPOL

**Published:** June 11, 2025

**Source type:** International agency release

**Research grade:** Source grade P2

**Language:** English

**Official record:** Official publication

**Address:** [https://www.interpol.int/News-and-Events/News/2025/20-000-malicious-IPs-and-domains-taken-down-in-INTERPOL-infostealer-crackdown](https://www.interpol.int/News-and-Events/News/2025/20-000-malicious-IPs-and-domains-taken-down-in-INTERPOL-infostealer-crackdown)

**What it supports:** Establishes the 26-country scope, 20,000+ IP/domain figure, 41 servers seized, and 32 arrests.

**Dataset id:** src\_interpol\_secure\_2025

How this source is used

Cited 2 times across 2 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[INTERPOL Operation Secure](https://takedownindex.org/takedowns/interpol-operation-secure)

Malware and botnets, January 2025

Primary source

### Organization roles

1 citation

Cited for an organization's recorded role in a takedown.

-
[International Criminal Police Organization](https://takedownindex.org/takedowns/interpol-operation-secure)

Coordinator, INTERPOL Operation Secure

Primary source

[All sources](https://takedownindex.org/sources)