Signal
Submitted
May 22, 2026, 17:58 UTC
Netherlands' FIOD seized 800 servers and arrested two men linked to Stark Industries web hosting firm supporting sanctioned Russian and Belarusian cyber operations.
Dutch financial crime investigators (FIOD) arrested two men and seized 800 servers linked to Stark Industries, a web hosting company accused of enabling cyberattacks, interference operations, and disinformation campaigns supporting Russian and Belarusian entities sanctioned by the EU. Stark Industries, founded shortly before Russia's invasion of Ukraine, was sanctioned by the EU on May 20, 2025. The infrastructure was later transferred to a Dutch front company named WorkTitans B.V., operating under THE.Hosting brand and linked to pro-Russian hacktivist group NoName057(16) known for distributed denial-of-service attacks. Operations included raids in multiple data centers in Dronten and Schiphol-Rijk, with additional searches in Enschede and Almere, seizing servers, laptops, phones, and records. Mirhosting, based in Almere, operated the physical servers and network connectivity for Stark’s traffic into Europe. Mirhosting denied knowingly supporting illegal operations.
Confidence: High
The signal clearly involves infrastructure supporting sanctioned Russian and Belarusian cyber operations including cyberattacks and information manipulation against democracy and security, confirmed by an EU sanction list and law enforcement seizures.
Source URL
https://www.bleepingcomputer.com/news/security/netherlands-seizes-800-servers-of-hosting-firm-enabling-cyberattacks/
Source reliability
F
Info credibility
6
Event time
May 22, 2026, 01:24 UTC
Event time confidence
unknown
Location
Data centers in Dronten and Schiphol-Rijk; searches in Enschede and Almere
Primary actor
Stark Industries
Country
Netherlands
Countries
Netherlands
Tags
FIOD, Stark Industries, WorkTitans B.V., THE.Hosting, NoName05716, Mirhosting, sanctions, Cyberattack Infrastructure, DDoS