Stark Industries Solutions: An Iron Hammer in the Cloud
Summary: Stark Industries Solutions Ltd was incorporated on February 10, 2022, two weeks before Russia's invasion of Ukraine, and became a hosting provider whose network researchers at Team Cymru tied to DDoS attack infrastructure used by the pro-Russia group NoName057(16). Spur.us found Stark's network (AS44477) hosts at least 74 VPN services and 40 proxy services, and UK business records name Ivan Vladimirovich Neculiti as the company's secretary, an identity also linked to the cybercrime username dfyz and the nickname DonChicho.
What you should know: NoName057(16) recruits hacktivists through Telegram, pays them to install DDoSia software that commandeers their machines, and rewards the most prolific attackers with cash prizes - a gamified attack force that NETSCOUT's Richard Hummel says combines bulletproof hosting like Stark's with legitimate cloud accounts, where an hour or two of grace before shutdown is enough to launch a large number of attacks.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026