Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
2026-05-26T19:23:31Z•9cdcb65c7cc53a8b9ffe209c680793ee42c06fa21e47216662a93b4e47f993e8
AWS GovCloudBrazilCISACanvasDDoSGitHub leakIoT botnetKimwolfMicrosoftRussiaStark Industries Solutionsanti-DDoSbotnetcredential leakcybercrimedata breachdata extortioneducation sectorhosting providersnation-statepatchingroutersserver seizuretoken theftzero-day
What happened
Multiple high-impact cyber incidents reported in Apr–May 2026: Dutch authorities seized ~800 servers and arrested two co-owners of hosting firms accused of providing infrastructure for Russian cyberattacks, influence operations and sanctioned ISP Stark Industries Solutions; a CISA contractor publicly exposed AWS GovCloud credentials and internal CISA build/deploy documents on GitHub, triggering a major breach response and Congressional inquiries; a 23‑year‑old alleged Kimwolf botmaster was arrested for operating an IoT botnet that enslaved millions of devices for massive DDoS, doxing and swat‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 9cdcb65c7cc53a8b9ffe209c680793ee42c06fa21e47216662a93b4e47f993e8
- Enrichment time
- 2026-05-26T19:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.