A significant success for Dutch law enforcement and cybersecurity authorities: Dutch Police and the National Cyber Security Centre (NCSC) have taken down a large botnet following a report from a security researcher. The investigation identified 200 servers located in the Netherlands that were used to support the network's infrastructure.
During the operation, police seized a number of the servers, after which the hosting provider shut down the entire infrastructure. According to the NCSC, the network was linked to at least 17 million infected devices and had been used to facilitate cyberattacks while concealing their origin.
The operation was announced jointly by the NCSC and Dutch Police on 28 May 2026. In related news, the NCSC's annual Cybercrime Monitor reported that cyberattacks against Dutch companies have fallen to their lowest level in the past nine years.
Keynotes:
"Dutch police say they dismantled a large botnet this week comprising at least 17 million infected devices."
"...police began an investigation, which resulted in the discovery of 200 servers underpinning the botnet's infrastructure located in the country."
"...NCSC-NL published its annual Cybercrime Monitor report, which revealed cyberattacks on Dutch companies had fallen to the lowest level in nine years."
