Looking Into a Cyber-Attack Facilitator in the Netherlands

Trend Micro researchers report that a small VPS provider with servers in the Netherlands and Romania has been repeatedly abused since 2015 as a bulletproof facilitator for APT and cybercriminal activity — including at least 80 Pawn Storm campaigns — hosting credential phishing sites, C&C servers, exploit sites and even banking malware, while employing BGP routing tricks and lax policies to evade detection.