Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
2026-05-26T01:23:25Z•8286e627f9ce966d841814fe8ed64290a3412350b525bd36175ef83ea6edf093
AWS GovCloudBrazilCISACanvasDDoSEU sanctionsGitHub leakIoTKimwolfMicrosoftRussiaScattered Spideranti-DDoS abusearrestbotnetcongressional inquirycredential leakdata extortiondata leakeducation sectorhosting seizurerouter exploitationserver seizurestate-sponsoredzero-day
What happened
A series of high-impact cybersecurity incidents reported by KrebsOnSecurity: Dutch authorities seized ~800 servers and arrested two hosting co-owners accused of operating infrastructure that facilitated Russian cyberattacks and influence operations (linked to an EU-sanctioned ISP). The U.S. CISA is responding to a major leak after a contractor publicly posted AWS GovCloud credentials and internal build/deploy artifacts on GitHub, prompting congressional inquiries. Law enforcement arrested the alleged Kimwolf botmaster in Canada (IoT botnet used for massive DDoS and abuse), and a widespread ext
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 8286e627f9ce966d841814fe8ed64290a3412350b525bd36175ef83ea6edf093
- Enrichment time
- 2026-05-26T01:23:25Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.