


Perceptive Security
SOC/SIEM Consultancy

Dutch govt disrupts malware botnet with 17 million infected devices
Published:
29 mei 2026 om 14:26:36
Alert date:
29 mei 2026 om 15:02:48
Source:
bleepingcomputer.com
Ransomware & Malware, Network Infrastructure, Mobile & IoT
Dutch authorities successfully disrupted a massive botnet operation comprising 17 million infected devices. The law enforcement action resulted in taking the botnet offline and seizing more than 200 servers from a local provider that was supporting the malicious infrastructure. This represents a significant cybersecurity operation targeting one of the largest known botnets in recent times.
Technical details
Dutch authorities disrupted a massive botnet comprising 17 million infected devices including computers, tablets, and smartphones. The operation involved seizing more than 200 servers at a local hosting provider in the Netherlands that controlled the botnet infrastructure. The botnet was linked to Asocks, a proxy service advertising 7 million IP addresses, 150 locations, and 100,000 clients. The service offered corporate, residential, and mobile proxies for monthly subscriptions between $5 and $15. The botnet was used for cyberattacks including distributed denial-of-service (DDoS) attacks, malicious traffic proxying, and cryptocurrency mining. Device owners did not knowingly participate in the cybercrime operations.
Mitigation steps:
To protect networking devices from botnet infections: ensure default credentials have been changed to something unique and strong, apply the latest firmware updates, and disable remote administration panels when not needed.
Affected products:
Computers
Tablets
Smartphones
Networking devices
Asocks proxy service
Related links:
https://www.ncsc.nl/nieuws/gezamenlijke-actie-politie-en-ncsc-legt-groot-botnetwerk-plat
https://nltimes.nl/2026/05/28/ncsc-dutch-police-disrupt-global-botnet-controlled-via-netherlands-based-servers
Related CVE's:
Related threat actors:
IOC's:
Asocks proxy service, 17 million infected devices, 200 compromised servers in Netherlands
This article was created with the assistance of AI technology by Perceptive.
