A large-scale botnet consisting of 17 million infected consumer devices was disrupted by Dutch police after a security researcher reported it to the Netherlands’ National Cyber Security Centre. The botnet operated through about 200 command-and-control servers, which were seized from a hosting provider in the Netherlands. The infected devices were used to route malicious traffic and facilitate cybercrime, including spam, phishing, online fraud, and DDoS attacks. The botnet reportedly powered a residential proxy network, possibly linked to the company Asocks. The takedown is part of ongoing efforts to disrupt similar botnets that exploit residential proxy networks.

The botnet enabled cybercriminals to remotely control millions of consumer devices to conduct various illicit activities such as sending spam and phishing emails, committing online fraud, and launching distributed denial-of-service attacks. This large-scale compromise of devices posed significant risks to individual users and broader internet infrastructure by facilitating widespread cyberattacks and abuse of residential proxy services.

The botnet has been disrupted through law enforcement seizure of command-and-control servers and hosting provider cooperation. Users are advised to keep their devices updated, use unique and strong passwords along with multi-factor authentication, install applications only from trusted sources, secure Wi-Fi networks, and deploy anti-malware solutions. No specific patch is applicable as this is a malware infection scenario; mitigation focuses on device hygiene and network security best practices.