Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

17-Million-device botnet cyberattack infrastructure

Malware Activity
First reported
Last updated
Happening score
H score 16
2 unique sources, 2 articles

Summary

Hide ▲

Dutch authorities disrupted a botnet that controlled at least 17 million infected devices and used more than 200 servers in the Netherlands. The network was used to route malicious traffic and support cyberattacks across computers, tablets, smartphones, and IoT devices. Local reporting linked the service to Asocks residential proxies, and the infrastructure provider reportedly took the botnet offline after the police seizure.

Related Happenings

Dutch police and NCSC seize botnet infrastructure

Law Enforcement
H score40 First: 29.05.2026 17:26 Last: 29.05.2026 17:26 Sources 1

How related: police officials seized a subset of these servers from a hosting provider that provided the infrastructure.

About this happening: Dutch police and the **NCSC** seized **more than 200 servers** and took offline a **17 million-device botnet**, disrupting infrastructure used for **cyberattacks**. The action fol...

Open Happening

NCSC-UK joint advisory on covert botnets and proxy networks

Public Sector Action
H score66 First: 23.04.2026 15:28 Last: 23.04.2026 15:28 Sources 1

About this happening: **NCSC-UK** and partner agencies issued a **joint advisory** warning that **China-nexus hackers** are using **hijacked consumer devices** as covert proxy networks to hide maliciou...

Open Happening

China-nexus hijacked-device proxy network campaign

Campaign
H score43 First: 23.04.2026 15:28 Last: 23.04.2026 15:28 Sources 1

About this happening: **China-nexus** hackers are using **JDY**, a covert **SOHO/IoT** reconnaissance network, to expand **targeted scanning** and **service fingerprinting** across exposed infrastructu...

Open Happening

Politie seizure of bulletproof hosting servers

Law Enforcement
H score28 First: 17.11.2025 21:19 Last: 17.11.2025 21:19 Sources 1

About this happening: The Dutch police **seized around 250 physical servers** from a **bulletproof hosting** service, disrupting infrastructure that had supported **cybercrime** cases across **more tha...

Open Happening

Timeline

  1. 31.05.2026 15:22 1 articles · 1mo ago

    Dutch botnet takedown linked to Asocks residential proxies

    Attribution Update

    Dutch police and the NCSC said the botnet controlled at least 17 million infected devices and used more than 200 servers in the Netherlands; local reporting linked the service to Asocks residential proxies, and the infrastructure provider reportedly took the botnet offline after the police seizure.

    Show sources
    Open in new tab
  2. 29.05.2026 17:26 2 articles · 1mo ago

    Dutch authorities disrupt a 17-million-device botnet

    Initial Disclosure

    Dutch police and the National Cyber Security Centre (NCSC) disrupted a botnet that controlled at least 17 million infected devices and seized more than 200 servers in the Netherlands. The seized infrastructure was used to control computers, tablets, and smartphones for cyberattacks, and the hosting provider took the botnet offline because it was being used for criminal activities.

    Show sources
    Open in new tab