Hosting Firms Become Enforcement Targets in Influence Ops
Hosting and transit providers are no longer just neutral plumbing when they carry sanctioned clients. Dutch investigators treated the infrastructure itself as part of the operation, because the hosting layer was used to support cyberattacks, interference, and disinformation tied to Russian and Belarusian entities under EU sanctions.
FIOD arrested two suspects and seized 800 servers linked to Stark Industries, along with laptops, phones, and records. Investigators say the infrastructure was shifted after EU sanctions into a newly created Dutch company that acted as a front, and reports link the same network to NoName057(16) activity and high-capacity connectivity services in the Netherlands.
The forward risk is continuity through re-hosting. Sanctioned operators can move the same infrastructure role into a fresh domestic entity, so enforcement pressure now extends to hosts, ISPs, and resellers that keep the network alive.