FIOD arrests Stark Industries-linked operators and seizes 800 servers
Law Enforcement
Summary
Hide ▲
Show ▼
FIOD arrested two men and seized 800 servers tied to Stark Industries, escalating a law-enforcement case involving hosting infrastructure used for cyberattacks and disinformation campaigns. The action also covered raids and searches across several Dutch locations. Investigators said the infrastructure had been moved through a new Dutch company after EU sanctions.
Related Happenings
European Union sanctions Stark Industries
Regulatory/Legal Action
First: 22.05.2026 20:24
Last: 22.05.2026 20:24
Sources 1
How related:
The EU added Stark Industries to the list of sanctioned entities last year on May 20.
About this happening:
The **European Union** added **Stark Industries** to its sanctions list, formally restricting a hosting company tied to **cyberattacks** and disinformation support. The move matte...
European Union sanctions Stark Industries
Regulatory/Legal ActionHow related: The EU added Stark Industries to the list of sanctioned entities last year on May 20.
About this happening: The **European Union** added **Stark Industries** to its sanctions list, formally restricting a hosting company tied to **cyberattacks** and disinformation support. The move matte...
Europol-led Cyber-Patrol Week piracy enforcement
Law Enforcement
First: 19.11.2025 18:00
Last: 19.11.2025 18:00
Sources 1
About this happening:
Europol, the **European Union Intellectual Property Office**, and **Spain’s National Police** referred **25 illicit IPTV services** for disruption during **Intellectual Property C...
Europol-led Cyber-Patrol Week piracy enforcement
Law EnforcementAbout this happening: Europol, the **European Union Intellectual Property Office**, and **Spain’s National Police** referred **25 illicit IPTV services** for disruption during **Intellectual Property C...
Stark Industries bulletproof-hosting rebrand and asset shift after EU sanctions
Threat Actor Meta
First: 11.09.2025 20:40
Last: 11.09.2025 20:40
Sources 1
How related:
During that time, the Stark network assets were transferred from PQHosting to a new entity called the[.]hosting, under the control of the Dutch entity WorkTitans BV.
About this happening:
**Stark Industries Solutions Ltd.** rebranded and shifted assets after **EU sanctions**, preserving a **bulletproof hosting** network tied to **cyberattacks** and **disinformation...
Stark Industries bulletproof-hosting rebrand and asset shift after EU sanctions
Threat Actor MetaHow related: During that time, the Stark network assets were transferred from PQHosting to a new entity called the[.]hosting, under the control of the Dutch entity WorkTitans BV.
About this happening: **Stark Industries Solutions Ltd.** rebranded and shifted assets after **EU sanctions**, preserving a **bulletproof hosting** network tied to **cyberattacks** and **disinformation...
Latest development: 25.05.2026 16:21
Dutch FIOD arrested Andrey Nesterenko of MIRhosting and Youssef Zinad of WorkTitans BV on May 18, 2026, searched three businesses in Enschede and Almere and two data centers in Dronten and Schiphol-Rijk, and seized laptops, telephones, and more than 800 servers in a sanctions investigation tied to the[.]hosting, MIRhosting, and WorkTitans BV.
Timeline
-
22.05.2026 20:24 1 articles · 5d ago
Stark Industries is founded
Untyped PhaseStark Industries, a web hosting firm tied to the later investigation, was founded on February 10, 2022, shortly before Russia’s invasion of Ukraine.
Show sources
- Netherlands seizes 800 servers of hosting firm enabling cyberattacks — www.bleepingcomputer.com — 22.05.2026 20:24
-
22.05.2026 20:24 1 articles · 5d ago
EU sanctions Stark Industries
Legal Policy Action UpdateThe European Union added Stark Industries to its list of sanctioned entities on May 20, 2025, later framing the company as part of a structure that provided resources to Russian and Belarusian entities.
Show sources
- Netherlands seizes 800 servers of hosting firm enabling cyberattacks — www.bleepingcomputer.com — 22.05.2026 20:24
-
22.05.2026 20:24 2 articles · 5d ago
FIOD arrests two men and seizes 800 servers
Legal Policy Action UpdateFinancial crime investigators in the Netherlands (FIOD) arrested a 57-year-old suspect who was the company director and a 39-year-old who headed a separate connectivity firm, while raiding data centers in Dronten and Schiphol-Rijk and searching locations in Enschede and Almere; the action seized 800 servers, laptops, phones, and administrative records.
Show sources
- Netherlands seizes 800 servers of hosting firm enabling cyberattacks — www.bleepingcomputer.com — 22.05.2026 20:24
- Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks — krebsonsecurity.com — 25.05.2026 16:21
-
22.05.2026 20:24 1 articles · 5d ago
WorkTitans B.V. and Mirhosting are linked to NoName057(16)
Attribution UpdateWorkTitans B.V., which provides hosting services under THE.Hosting, is alleged to have been linked by Danish authorities and infrastructure providers to attacks by the pro-Russian hacktivist group NoName057(16), while Mirhosting, based in Almere, said it did not knowingly support illegal operations and responded quickly to abuse complaints.
Show sources
- Netherlands seizes 800 servers of hosting firm enabling cyberattacks — www.bleepingcomputer.com — 22.05.2026 20:24