Netherlands seizes 800 servers and arrests two for aiding cyberattacks

Dutch authorities carried out a large-scale operation against a service alleged to provide infrastructure for cyberattacks. According to KrebsOnSecurity, the operation seized 800 servers and arrested two people.

According to the report, the investigation focuses on services known in the online criminal ecosystem as 'bulletproof hosting'. The term is used to describe hosting providers alleged to ignore the illegal content or activities of their customers.

Such infrastructure can form the technical foundation of various types of cyberattack. Seizing the servers aims to disable the infrastructure the service provides, while the arrests form the criminal dimension of the operation.

KrebsOnSecurity's report states that the charges against the individuals fall within the framing of 'aiding cyberattacks'. At this stage, the legal situation of those individuals depends on the judicial process; the charges are not considered settled until assessed by a court.

Law-enforcement operations to seize infrastructure have become an increasingly common method in fighting cybercrime in recent years. Targeting the technical infrastructure that enables criminal activity, rather than catching individual perpetrators one by one, aims to provide broader deterrence.

The seizure of a figure as large as 800 servers points to the scope of the operation. An intervention at this scale can affect the activity of many different customers, which indicates how widely such services are used.

The international dimension is also an important part of these operations. Because cybercrime often knows no borders, seizing infrastructure in one country can affect activity in other countries. For that reason, such operations frequently require international cooperation.

According to the report, the effect of such interventions can often be temporary; criminal actors can turn to new infrastructure. Even so, experts note that these operations serve a deterrent function by raising costs and increasing risk.

In the later stages of the investigation, data obtained from the seized servers may shed light on other investigations as well. Such operations often form a starting point for tracing a broader network.

This article reports on a law-enforcement operation and does not constitute cybersecurity advice. Individuals and organisations should seek expert support for their own security measures.