logo

A Stark connection

ID: cbf554c0-bb6e-5b6a-9161-916e57634cf9

STIX ID: report--cbf554c0-bb6e-5b6a-9161-916e57634cf9

Feed Name: IntelInsights (Substack)

Threat Score
38/100

Date Published: 2025-09-02

Date Updated: 2026-04-19

Author: Vasilis Orlof

...
...

The report examines how the controversial bulletproof hosting provider tied to Russian state-sponsored and cybercriminal activity (formerly Stark Industries Solutions) shifted its infrastructure to PQ Hosting/WorkTitans B.V. in the Netherlands just before EU sanctions targeted the Neculiti brothers. Citing opsec overlaps (phone number reuse), ASN continuity (ASN44477/The-Hosting), and corporate registrations, the author assesses that the same operators likely continue supporting malicious operations under new entities and poses questions about regulatory gaps enabling this move.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.