{"id":13127,"date":"2026-05-25T10:03:40","date_gmt":"2026-05-25T10:03:40","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/05\/25\/authorities-seized-800-servers-of-hosting-company-used-to-launch-cyberattacks\/"},"modified":"2026-05-25T10:03:40","modified_gmt":"2026-05-25T10:03:40","slug":"authorities-seized-800-servers-of-hosting-company-used-to-launch-cyberattacks","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/05\/25\/authorities-seized-800-servers-of-hosting-company-used-to-launch-cyberattacks\/","title":{"rendered":"Authorities Seized 800 Servers of Hosting Company Used to Launch Cyberattacks"},"content":{"rendered":"<p>    Authorities Seized 800 Servers of Hosting Company Used to Launch Cyberattacks<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n    <!-- no image --><br \/>\n \t<BR><br \/>\n<BR><\/BR><\/p>\n<div>\n<p class=\"wp-block-paragraph\">Dutch authorities have seized more than 800 servers and arrested two individuals as part of a major investigation into a hosting infrastructure allegedly used to support cyberattacks, disinformation campaigns, and sanctions evasion linked to Russia.<\/p>\n<p class=\"wp-block-paragraph\">The Fiscal Information and Investigation Service (FIOD) confirmed that arrests were carried out on May 18, 2026, targeting a 57-year-old man from Amsterdam and a 39-year-old man from The Hague.<\/p>\n<p class=\"wp-block-paragraph\">Both suspects are accused of violating the EU Sanctions Act by indirectly providing economic resources and services to entities sanctioned by the European Union.<\/p>\n<h2 id=\"h-authorities-seize-attack-servers\" class=\"wp-block-heading\"><strong>Authorities Seize Attack Servers<\/strong><\/h2>\n<p class=\"wp-block-paragraph\">The investigation centers on a web hosting company established on February 10, 2022, just weeks before Russia invaded Ukraine.<\/p>\n<p class=\"wp-block-paragraph\">According to investigators, the company\u2019s infrastructure was later leveraged to facilitate destabilizing activities targeting the European Union.<\/p>\n<p class=\"wp-block-paragraph\">These activities reportedly included:<\/p>\n<ul class=\"wp-block-list\">\n<li>Launching <a href=\"https:\/\/cybersecuritynews.com\/eu-sanctioned-three-russian-hackers\/\" target=\"_blank\" rel=\"noreferrer noopener\">cyberattacks against European systems<\/a>.\n<\/li>\n<li>Conducting interference operations.\n<\/li>\n<li>Disseminating disinformation campaigns.\n<\/li>\n<li>Supporting broader information manipulation efforts.<\/li>\n<\/ul>\n<p class=\"wp-block-paragraph\">Authorities believe the infrastructure played a role in undermining democratic processes and disrupting public and economic systems across EU member states. The hosting provider was officially placed on the EU sanctions list on May 20, 2025.<\/p>\n<p class=\"wp-block-paragraph\">However, investigators discovered that a significant portion of its infrastructure was transferred to a newly established Dutch company around the same time.<\/p>\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.fiod.nl\/fiod-houdt-twee-verdachten-aan-wegens-overtreding-sanctiewetgeving\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">FIOD findings indicate that<\/a> this new entity acted as a front organization to circumvent sanctions. The 57-year-old suspect is identified as the company\u2019s director and indirect sole shareholder.<\/p>\n<p class=\"wp-block-paragraph\">A second Dutch company, operated by the 39-year-old suspect, allegedly played a supporting role by providing internet connectivity to the infrastructure, effectively enabling continued operations despite sanctions.<\/p>\n<p class=\"wp-block-paragraph\">Authorities conducted coordinated searches across multiple locations, including:<\/p>\n<ul class=\"wp-block-list\">\n<li>Three business premises in Enschede and Almere.\n<\/li>\n<li>Two data centers are located in Dronten and Schiphol-Rijk.<\/li>\n<\/ul>\n<p class=\"wp-block-paragraph\">During these operations, law enforcement seized:<\/p>\n<ul class=\"wp-block-list\">\n<li>Over 800 servers.\n<\/li>\n<li>Administrative records.\n<\/li>\n<li>Laptops and mobile devices.<\/li>\n<\/ul>\n<p class=\"wp-block-paragraph\">The scale of the seizure underscores the extensive infrastructure required for the operation. It suggests a significant capacity for cyber-enabled activities.<\/p>\n<h2 id=\"h-ongoing-investigation\" class=\"wp-block-heading\"><strong>Ongoing Investigation<\/strong><\/h2>\n<p class=\"wp-block-paragraph\">The Functional Prosecution Service is leading the case under the Dutch Public Prosecution Service.<\/p>\n<p class=\"wp-block-paragraph\">Violations of EU sanctions fall under both the Sanctions Act and the Economic Offenses Act, making such activities criminally punishable.<\/p>\n<p class=\"wp-block-paragraph\">Since the start of the Russia-Ukraine conflict, the EU has expanded sanctions targeting Russia and Belarus, including restrictions on financial transactions and the provision of technical services.<\/p>\n<p class=\"wp-block-paragraph\">Authorities emphasize that attempts to circumvent these measures, including through <a href=\"https:\/\/cybersecuritynews.com\/microsoft-and-authorities-dismatles-bec-attack-chain\/\" target=\"_blank\" rel=\"noreferrer noopener\">proxy companies or infrastructure transfers<\/a>, are actively investigated.<\/p>\n<p class=\"wp-block-paragraph\">The FIOD continues to track individuals and organizations attempting to evade sanctions while enabling cyber operations.<\/p>\n<p class=\"wp-block-paragraph\">The investigation remains ongoing, and further arrests or asset seizures may follow as authorities analyze the confiscated infrastructure and data.<\/p>\n<p class=\"has-text-align-center has-background wp-block-paragraph\" style=\"background:linear-gradient(180deg,rgb(238,238,238) 91%,rgb(169,184,195) 100%)\"><strong>Follow us on\u00a0<a href=\"https:\/\/news.google.com\/publications\/CAAqMggKIixDQklTR3dnTWFoY0tGV041WW1WeWMyVmpkWEpwZEhsdVpYZHpMbU52YlNnQVAB?hl=en-IN&amp;gl=IN&amp;ceid=IN:en\" target=\"_blank\" rel=\"noreferrer noopener\">Google News<\/a>,\u00a0<a href=\"https:\/\/www.linkedin.com\/company\/cybersecurity-news\/\" target=\"_blank\" rel=\"noreferrer noopener\">LinkedIn<\/a>,\u00a0and\u00a0<a href=\"https:\/\/x.com\/cyber_press_org\" target=\"_blank\" rel=\"noreferrer noopener\">X<\/a>\u00a0to Get More Instant Updates.<\/strong><\/p>\n<p>The post <a href=\"https:\/\/cybersecuritynews.com\/authorities-seized-800-servers-launch-cyberattacks\/\">Authorities Seized 800 Servers of Hosting Company Used to Launch Cyberattacks<\/a> appeared first on <a href=\"https:\/\/cybersecuritynews.com\/\">Cyber Security News<\/a>.<\/p>\n<\/div>\n<p> \t<BR><br \/>\n <BR><\/BR><br \/>\n    Abinaya<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n<a href=\"https:\/\/cybersecuritynews.com\/authorities-seized-800-servers-launch-cyberattacks\/\">Go to cyber-security-news<\/a><br \/>\n \t<BR><br \/>\n <BR><\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Authorities Seized 800 Servers of Hosting Company Used to Launch Cyberattacks Dutch authorities have seized more than 800 servers and arrested two individuals as part of a major investigation into a hosting infrastructure allegedly used to support cyberattacks, disinformation campaigns, and sanctions evasion linked to Russia. The Fiscal Information and Investigation Service (FIOD) confirmed that [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1636,129,63],"tags":[130],"class_list":["post-13127","post","type-post","status-publish","format-standard","hentry","category-cyber-attack-news","category-cyber-security","category-cyber-security-news","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/13127"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=13127"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/13127\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=13127"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=13127"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=13127"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}