Live data from Hacker News

Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

krebsonsecurity.com

91–100 of 114 posts

Re: Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

#91

I see couple of issues here: > 1) "Netherlands Seizes 800 Servers" - this should not have happened. Full stop. It's not US, UK or even DE. We are losing, people. > 2) They did not turn those into "honey pots". meaning: they did not want a fix. They wanted a show. > 3) I bet it's just a tip of an iceberg. Care to assume how many of those are hosted at "major cloud providers"? Money talks ...

> Care to assume how many of those are hosted at "major cloud providers"?

Zero (not a guess)

Re: Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

#92

When I was learning some homelab stuff, and was setting up pfSense, I was able to see the geos of all the scans/attacks on my home internet IP. I was surprised to see that Netherlands was up there with Russia and China in volume. They all got geo blocked. What is it about the Netherlands that makes them so attractive to these people?

That's where the servers are. See all the tor nodes in Netherlands. They aren't actually in the Netherlands.

What is this supposed to mean?

Most of the tor nodes in Netherlands are actually physically in Netherlands.

Re: Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

#93
post #91

I see couple of issues here: > 1) "Netherlands Seizes 800 Servers" - this should not have happened. Full stop. It's not US, UK or even DE. We are losing, people. > 2) They did not turn those into "honey pots". meaning: they did not want a fix. They wanted a show. > 3) I bet it's just a tip of an iceberg. Care to assume how many of those are hosted at "major cloud providers"? Money talks ...

> Care to assume how many of those are hosted at "major cloud providers"? Zero (not a guess)

[deleted]

Re: Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

#94
post #91

I see couple of issues here: > 1) "Netherlands Seizes 800 Servers" - this should not have happened. Full stop. It's not US, UK or even DE. We are losing, people. > 2) They did not turn those into "honey pots". meaning: they did not want a fix. They wanted a show. > 3) I bet it's just a tip of an iceberg. Care to assume how many of those are hosted at "major cloud providers"? Money talks ...

> Care to assume how many of those are hosted at "major cloud providers"? Zero (not a guess)

Exhibit 1: GRU-linked Sandworm/APT44 campaigns (2021–2025)

Re: Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

#95
post #10

I’ve been on the defender side of security my whole career. I know in some markets crime pays more than legitimate work, but it never ceases to amaze me how much thought, effort, planning, and engineering goes into providing infrastructure IT services for cybercriminals. The people involved definitely have the skills to be profitable at legitimate work; it just puzzles me that they choose to support criminals.

> it just puzzles me that they choose to support criminals.

Same reason for CIA and NSA engineers.

Re: Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

#96
post #91

Earlier quoted context omitted.

> Care to assume how many of those are hosted at "major cloud providers"? Zero (not a guess)

Exhibit 1: GRU-linked Sandworm/APT44 campaigns (2021–2025)

None of the servers seized from this small datacenter were hosted at a big cloud provider, they were hosted at the small datacenter and not a big cloud provider.

Re: Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

#97
post #10

I’ve been on the defender side of security my whole career. I know in some markets crime pays more than legitimate work, but it never ceases to amaze me how much thought, effort, planning, and engineering goes into providing infrastructure IT services for cybercriminals. The people involved definitely have the skills to be profitable at legitimate work; it just puzzles me that they choose to support criminals.

I watched the downfall and eventual jailing of someone who had a great job, career, and family after he started getting involved in cybercrime. As far as I can make sense of it, he enjoyed the thrill of feeling superior to others: Evading the law, exploiting people who viewed as stupid, and enriching himself in the process. He got caught through a mistake that was really dumb in retrospect. I think he believed his in…

> he enjoyed the thrill of feeling superior to others [...] He got caught through a mistake that was really dumb in retrospect.

It seems to be common occurrence. I still can't get over that one hacker who dumped stolen data on forum, to sell it/prove his capabilities, in form of tar.gz archive, that accidentally included his entire home directory

Re: Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

#99

We should note these are not even slightly legitimate hosting companies, lest anyone worry too much about their non-KYC offshore servers. These aren't hosting companies that ask little, they are just directly front companies for Russian intelligence, owned by members of Russian intelligence, they don't do anything else, they don't provide hosting service to regular people even if you want it (I have tried). Unlike in…

>they don't provide hosting service to regular people even if you want it (I have tried) That doesn't sound right. I used PQ.Hosting once when I needed a quick temporary VPS, just like many other legitimate users. Yes they never asked much, but they also used to ban users left and right even for torrenting, so it wasn't bulletproof in any meaningful sense. I'm sure they were into shady stuff though, since their IP qu…

legal threats of torrenting == lots of attention. not really something that the SVR or GRU want on their secret servers.

plus they just gobble bandwidth. you want a bit to ensure your company looks real / makes some $$$ but you don't want to threaten your C2 nodes

Re: Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

#100
post #53

Earlier quoted context omitted.

If communism is the cause, then why would this same mentality be such a massive problem in America?

> If communism is the cause, then why would this same mentality be such a massive problem in America? By communism I don't think people talk about the philosophical basis of an idealized society, but the totalitarian regime that oppresses a society and keeps the working class constantly in survival mode under the risk of losing it all.

[deleted]
Post reply on HN