Find notable cyber news and cases, enriched with sources, timelines, and signals.

FIOD arrests Stark Industries-linked operators and seizes 800 servers

Law Enforcement
First reported
Last updated
Happening score
H score 18
2 unique sources, 2 articles

Summary

Hide ▲

FIOD arrested two men and seized 800 servers tied to Stark Industries, escalating a law-enforcement case involving hosting infrastructure used for cyberattacks and disinformation campaigns. The action also covered raids and searches across several Dutch locations. Investigators said the infrastructure had been moved through a new Dutch company after EU sanctions.

Related Happenings

European Union sanctions Stark Industries

Regulatory/Legal Action
First: 22.05.2026 20:24 Last: 22.05.2026 20:24 Sources 1

How related: The EU added Stark Industries to the list of sanctioned entities last year on May 20.

About this happening: The **European Union** added **Stark Industries** to its sanctions list, formally restricting a hosting company tied to **cyberattacks** and disinformation support. The move matte...

Europol-led Cyber-Patrol Week piracy enforcement

Law Enforcement
First: 19.11.2025 18:00 Last: 19.11.2025 18:00 Sources 1

About this happening: Europol, the **European Union Intellectual Property Office**, and **Spain’s National Police** referred **25 illicit IPTV services** for disruption during **Intellectual Property C...

Stark Industries bulletproof-hosting rebrand and asset shift after EU sanctions

Threat Actor Meta
First: 11.09.2025 20:40 Last: 11.09.2025 20:40 Sources 1

How related: During that time, the Stark network assets were transferred from PQHosting to a new entity called the[.]hosting, under the control of the Dutch entity WorkTitans BV.

About this happening: **Stark Industries Solutions Ltd.** rebranded and shifted assets after **EU sanctions**, preserving a **bulletproof hosting** network tied to **cyberattacks** and **disinformation...

Latest development: 25.05.2026 16:21

Dutch FIOD arrested Andrey Nesterenko of MIRhosting and Youssef Zinad of WorkTitans BV on May 18, 2026, searched three businesses in Enschede and Almere and two data centers in Dronten and Schiphol-Rijk, and seized laptops, telephones, and more than 800 servers in a sanctions investigation tied to the[.]hosting, MIRhosting, and WorkTitans BV.

Timeline

  1. 22.05.2026 20:24 1 articles · 5d ago

    EU sanctions Stark Industries

    Legal Policy Action Update

    The European Union added Stark Industries to its list of sanctioned entities on May 20, 2025, later framing the company as part of a structure that provided resources to Russian and Belarusian entities.

    Show sources
  2. 22.05.2026 20:24 2 articles · 5d ago

    FIOD arrests two men and seizes 800 servers

    Legal Policy Action Update

    Financial crime investigators in the Netherlands (FIOD) arrested a 57-year-old suspect who was the company director and a 39-year-old who headed a separate connectivity firm, while raiding data centers in Dronten and Schiphol-Rijk and searching locations in Enschede and Almere; the action seized 800 servers, laptops, phones, and administrative records.

    Show sources
  3. 22.05.2026 20:24 1 articles · 5d ago

    WorkTitans B.V. and Mirhosting are linked to NoName057(16)

    Attribution Update

    WorkTitans B.V., which provides hosting services under THE.Hosting, is alleged to have been linked by Danish authorities and infrastructure providers to attacks by the pro-Russian hacktivist group NoName057(16), while Mirhosting, based in Almere, said it did not knowingly support illegal operations and responded quickly to abuse complaints.

    Show sources