The Server Seizure That Affects Also Iran’s Cyber Operations
Dutch financial-crime investigators walked into data centers in Dronten and Schiphol-Rijk and seized approximately 800 servers. The target was WorkTitans B.V., a hosting provider that, on the surface, looked like any other internet infrastructure company. What investigators uncovered, however, was something far more significant: a ghost operation built on sanctioned infrastructure, quietly serving as the backbone for some of Iran’s most active cyber espionage campaigns.
The story starts a year earlier. In May 2025, the European Union sanctioned Stark Industries, an internet service provider linked to Russian information-warfare operations. Rather than shutting down, the people behind it simply rebranded. WorkTitans emerged as its successor, allegedly running the same servers under a fresh corporate name. It was a brazen move, and for a while, it worked.
Three Groups and One Hosting Provider
The uncovering of this story tells you a lot about how modern cyber operations actually function. Three separate Iranian...
Copyright of this story solely belongs to itvoice.in. To see the full text click HERE