cyber.hendryadrian.com
Security News · bleepingcomputer.com

Dutch Investigators Seize 800 Servers Tied to Hosting Firm Accused of Aiding Cyberattacks

· Original article ↗

Summary

Dutch investigators arrested two men and seized 800 servers linked to Stark Industries, which authorities accuse of supporting sanctioned entities and disruptive operations. Investigators believe its infrastructure moved to WorkTitans; reported links to NoName057(16) D及

Key points

  • FIOD arrested a 57-year-old company director and a 39-year-old head of an internet connectivity firm.
  • Authorities seized 800 servers, laptops, phones, and administrative records during raids at data centers and other locations in the Netherlands.
  • The investigation concerns Stark Industries, which the EU sanctioned for allegedly supporting Russian actions that undermine democracy and security.
  • Investigators believe the hosting infrastructure was transferred to WorkTitans B.V. after the sanctions; De Volkskrant reported that it operates as THE.Hosting.
  • De Volkskrant reported that Danish authorities and infrastructure providers linked WorkTitans to attacks by pro-Russian group NoName057(16), including DDoS activity.
  • Mirhosting denied knowingly supporting illegal operations and said it acted quickly after receiving abuse complaints.

Article Details

Event Type
Law-enforcement arrests and seizure of hosting infrastructure over alleged support for cyberattacks and sanctioned entities
Impact
FIOD arrested two men and seized 800 servers, laptops, phones, and administrative records in Dutch raids. Authorities allege the hosting infrastructure supported cyberattacks, information manipulation, and sanctioned Russian and Belarusian entities. Reports linked WorkTitans B.V. / THE.Hosting to attacks by NoName057(16); Mirhosting denied knowingly supporting illegal operations.

MITRE ATT&CK

T1498 · Network Denial of ServiceThe article reports that NoName057(16) had targeted organizations with distributed denial-of-service (DDoS) attacks.

Threat Actors

NoName057(16)A pro-Russian hacktivist group that the article says was linked by Danish authorities and infrastructure providers, as reported by De Volkskrant, to attacks associated with the hosting infrastructure. The reported attacks included DDoS; the link is presented as an allegation, not a confirmed finding.

Vendors

MIRhostingMirhosting, based in Almere, operated physical servers, provided colocation, and supplied high-capacity connectivity to major internet exchanges in Amsterdam and Frankfurt, acting as the transport layer through whichStark IndustriesDutch investigators arrested two men and seized 800 servers tied to Stark Industries, a web hosting operation accused of supporting cyberattacks, disinformation, and sanctioned Russian and Belarusian entities.THE.Hosting/ THE.Hosting, which authorities and media reports linked to support for the pro-Russian group NoName057(16) and other disruptive operations.WorkTitans B.V.The infrastructure was allegedly moved to WorkTitans B.V.

Countries

NetherlandsFinancial crime investigators in the Netherlands (FIOD) arrested two men and seized 800 servers linked to a web hosting company that enabled cyberattacks, interference operations, and disinformation campaigns.RussiaStark Industries was founded shortly before Russia’s invasion of Ukraine and was later sanctioned by the EU.

Industries

Internet connectivityFIOD arrested a 57-year-old company director and a 39-year-old internet connectivity firm head.Web hostingDutch investigators arrested two men and seized 800 servers tied to Stark Industries, a web hosting operation accused of supporting cyberattacks, disinformation, and sanctioned Russian and Belarusian entities.

Related Articles