Interpol-Led Operation Ramz Takedown of SniperDz PhaaS Platform (infosecurity-magazine.com)

• Operation Ramz dismantled SniperDz and arrested its main developer in Algeria.
• SniperDz had been active since 2015 with over 20,000 domains and 80 templates.
• Group-IB leveraged operator OpSec failures for identification.

"Interpol's Operation Ramz (Oct 2025–Feb 2026) across 13 MENA countries resulted in the dismantling of the SniperDz phishing-as-a-service platform and the arrest of its primary developer in Algeria. The platform, active since at least 2015, offered free phishing kits and infrastructure, with over 20,000 domains and 80 templates in five languages. Group-IB identified the operator through operational security failures."