Skip to content
Dutch Authorities Dismantle 17 Million Device Botnet in Major Cybercrime Operation

Dutch Authorities Dismantle 17 Million Device Botnet in Major Cybercrime Operation

First seen 29 May 2026, 05:40 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •May 30, 2026 at 05:23 UTC
  • •Dutch police dismantled a botnet of 17 million devices linked to cybercrime.
  • •Over 200 servers were seized, and the botnet was associated with the Asocks proxy service.
  • •Authorities emphasize the risk posed by residential proxy networks in cybercrime.

Dutch police, in collaboration with the National Cyber Security Centre (NCSC), have dismantled a massive botnet comprising over 17 million infected devices. The operation involved seizing more than 200 servers located in the Netherlands that were used to control the botnet's infrastructure. The botnet was reportedly linked to the Asocks residential proxy service, which has been associated with various cybercriminal activities, including phishing and DDoS attacks. Authorities received a tip from a cybersecurity researcher, prompting the investigation. The infected devices included computers, smartphones, tablets, and IoT devices. The NCSC has warned that residential proxy networks pose a significant threat to digital security, complicating the detection of malicious activities. Users are advised to secure their devices by changing default passwords and keeping software updated. The botnet's takedown is part of a broader effort to combat cybercrime, with several similar operations reported in recent months.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 139d ago How this analysis works

Timeline

2026-05-29
Dutch police take down massive botnet
Authorities dismantled a botnet controlling over 17 million devices, seizing 200 servers in the Netherlands.
Risky.Biz
2026-05-29
NCSC issues warning about residential proxies
The NCSC published a blog post highlighting the risks associated with residential proxy networks used for malicious purposes.
Theregister
2026-05-29
Investigation initiated after researcher tip-off
The investigation into the botnet began after a cybersecurity researcher alerted the NCSC about suspicious activities.
Interestingengineering

More articles in this cluster (31)

Following this threat?

Track Asocks in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed