#Mirhosting
Great blog post from @briankrebs.infosec.exchange.ap.brid.gy on #StarkIndustries. Makes a great point by highlighting it's links to MIRHosting. Where there are Dutch prefixes under these providers, there is usually always MIRHosting upstream.
September 11, 2025 at 6:32 PM
NIEUWS: Twee mannen in NL aangehouden door FIOD voor hulp bij het faciliteren van pro-Russische cyberaanvallen en handelen in strijd met Europese sancties.

Het gaat om Youssef Z. (57), eigenaar WorkTitans en Andrey N. (39), oprichter MIRhosting:

www.volkskrant.nl/binnenland/f...
FIOD doet inval bij Nederlandse hostingbedrijven die pro-Russische cyberaanvallen faciliteerden
De opsporingsdienst van de Belastingdienst FIOD heeft maandag twee mannen in Nederland aangehouden voor hulp bij het faciliteren van pro-Russische cyberaanvallen en het handelen in strijd met…
www.volkskrant.nl
May 22, 2026 at 8:32 AM
After the raids on MIRHosting and WorkTitans, THE.Hosting (Stark Industries rebrand) has decided to shut down

the.hosting/en/
June 8, 2026 at 10:44 PM
well, well, well, if it isn't Stark Industries/MIRhosting, notorious shithost. krebsonsecurity.com/2026/05/neth...
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and ...
krebsonsecurity.com
June 5, 2026 at 5:26 PM
Dutch police seized MirHosting and WorkTitans on Friday, two bulletproof hosting providers that hosted pro-Kremlin garbage: www.fiod.nl/fiod-houdt-t...

Here's the story of the two people who owned those companies: www.volkskrant.nl/binnenland/h...
How a consultant and a concert pianist from the Netherlands aided pro-Russian hackers
In the international information war, few methods are off-limits. Pro-Russian cybercriminals carry out attacks to sow fear and disrupt Western societies. De Volkskrant investigated how Dutch companies...
www.volkskrant.nl
May 24, 2026 at 1:06 PM
Dutch authorities seize 800 servers and arrest two executives operating internet hosting networks linked to Russian cyberattacks. MIRhosting and WorkTitans evaded EU sanctions to provide infrastructure for state-sponsored disinformation and warfare campaigns, the financial crime agency says.
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks – Krebs on Security
Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns inside the European Union. The two men were the focus…
krebsonsecurity.com
May 27, 2026 at 5:13 AM
SEO poisoning is pushing fake Gemini CLI and Claude Code install pages above legit results, tricking devs into a hidden PowerShell infostealer that grabs tokens, cookies, files, and system data. #GeminiCLI #ClaudeCode #Nodejs
SEO poisoning campaign leverages Gemini and Claude Code impersonation to deliver infostealer
EclecticIQ reports a financially motivated infostealer campaign that impersonates Gemini CLI, Claude Code, Node.js, Chocolatey, and other developer tools to trick users into running a hidden PowerShell installer. The malware steals credentials, OAuth tokens, session cookies, files, and system data from Windows endpoints, then exfiltrates them to command-and-control servers and can also execute operator-supplied follow-on payloads. #GeminiCLI #ClaudeCode #Nodejs #Chocolatey #MIRhosting #RedLine #LummaC2
www.hendryadrian.com
May 21, 2026 at 8:15 PM
Dutch authorities arrested two hosting company owners accused of supporting Russian threat actors and helping evade EU sanctions. Raids seized 800+ servers linked to disruptive attacks and information manipulation. #Netherlands #StarkIndustries
Admins of Bulletproof Hosting Service Used by Russian Hackers Arrested in Netherlands
Dutch authorities arrested two company owners accused of providing bulletproof hosting that supported Russian threat actors and helped evade European Union sanctions. The case is linked to Stark Industries, Mirhosting, and WorkTitans, which were allegedly used to keep infrastructure online for disruptive attacks and information manipulation against EU targets. #StarkIndustries #Mirhosting...
www.hendryadrian.com
May 26, 2026 at 10:45 AM
Netherlands busts Russian cyber network after raid on 800 servers

https://www.byteseu.com/2059544/

What was seized and where Last week, law enforcement officers carried out raids at two Dutch data centers. About 800 servers belonging to WorkTitans and MIRhosting were seized — the companies had …
Netherlands busts Russian cyber network after raid on 800 servers - Bytes Europe
What was seized and where
www.byteseu.com
May 28, 2026 at 6:39 AM
1.21.7 (Protocol 772)

🇳🇱 Netherlands
AS52000 (MIRhosting B.V.)
Max players: 20

Online Mode: ❌

🕐 Crawled at 2025-11-19 04:29:50.310 UTC

#Minecraft #MinecraftServer #MCScan #kittyscan
December 11, 2025 at 6:42 PM
Dutch authorities arrested two IT entrepreneurs in a sanctions probe, alleging infrastructure support for pro-Russian cyberattacks and disinformation. FIOD searched sites and data centers. #Netherlands #Doppelganger #NoName05716
Dutch authorities arrest men suspected of providing infrastructure for Russian cyber operations
Dutch authorities arrested two IT entrepreneurs over alleged violations of European sanctions tied to hosting infrastructure used in pro-Russian cyberattacks and disinformation campaigns. Investigators say the network involved Stark Industries, MIRhosting, WorkTitans, the Doppelgänger-linked Reliable Recent News network, and NoName057(16). #StarkIndustries #MIRhosting #WorkTitans #ReliableRecentNews #Doppelgänger #NoName05716...
www.hendryadrian.com
May 26, 2026 at 10:30 PM
FIOD houdt mannen aan die pro-Russische cyberaanvallen faciliteerden

De Fiod heeft vorige week twee mannen aangehouden die vanuit Nederland pro-Russische cyberaanvallen faciliteerden en handelden in strijd met Europese sancties. Volgens De Volkskrant gaat het om Youssef Z. (57), eigenaar van…
FIOD houdt mannen aan die pro-Russische cyberaanvallen faciliteerden
De Fiod heeft vorige week twee mannen aangehouden die vanuit Nederland pro-Russische cyberaanvallen faciliteerden en handelden in strijd met Europese sancties. Volgens De Volkskrant gaat het om Youssef Z. (57), eigenaar van WorkTitans in Enschede, en om Andrey N. (39), oprichter van MIRhosting in Almere. De infrastructuur van de bedrijven werd najaar 2025 gebruikt voor aanvallen van pro-Russische cybercriminelen bij gemeenteraadsverkiezingen in Denemarken.
copsincyberspace.wordpress.com
May 27, 2026 at 8:08 AM
📢 Rebranding de Stark Industries en the[.]hosting pour contourner les sanctions, avec l’appui présumé de MIRhost…📝 …
https://cyberveille.ch/posts/2025-09-15-rebranding-de-stark-industries-en-the-hosting-pour-contourner-les-sanctions-avec-lappui-presume-de-mirhosting/ #bulletproof_hosting #Cyberveil…
September 16, 2025 at 8:00 PM
Feed: "DCD"
Published on Thursday, June 18, 2026
Colo provider MIRhosting sees equipment disconnected at Netherlands data center
Comes one week after 800 serves seized from customer of MIRhosting
www.datacenterdynamics.com
June 19, 2026 at 12:14 PM
Verklaring MIRhosting naar aanleiding van recente mediapublicaties

#Persbericht #Cyberaanvallen #Denemarken #MIRhosting #Sanctiewetgeving #Deenseverkiezingen
May 23, 2026 at 10:00 AM
Verklaring MIRhosting naar aanleiding van recente mediapublicaties

#Persbericht #Cyberaanvallen #Denemarken #MIRhosting #Sanctiewetgeving #Deenseverkiezingen
May 23, 2026 at 6:42 AM
MIRhosting versterkt veiligheids- en nalevingsbeleid met integratie van Handelzeker

#Persbericht #MIRhosting #Handelzeker
March 14, 2026 at 8:32 AM