• KrebsOnSecurity.com celebrates its 16th anniversary today! • A huge “thank you” to all of our readers - newcomers, long-timers and drive-by critics alike. • Your engagement this past year here has been tremendous and truly a salve on a handful of dark days. • Happily, comeuppance was a strong theme running through our coverage in 2025, with a primary focus on entities that enabled complex and globally-dispersed cybercrime services. • In May 2024, we scrutinized the history and ownership of Stark Industries Solutions Ltd., a “bulletproof hosting” provider that came online just two weeks before Russia invaded Ukraine and served as a primary staging ground for repeated Kremlin cyberattacks and disinformation efforts. • A year later, Stark and its two co-owners were sanctioned by the European Union, but our analysis showed those penalties have done little to stop the Stark proprietors from rebranding and transferring considerable network assets to other entities they control.

Article Summaries:

  • KrebsOnSecurity.com celebrates its 16th anniversary today! A huge “thank you” to all of our readers - newcomers, long-timers and drive-by critics alike. Your engagement this past year here has been tremendous and truly a salve on a handful of dark days. Happily, comeuppance was a strong theme running through our coverage in 2025, with a primary focus on entities that enabled complex and globally-dispersed cybercrime services. In May 2024, we scrutinized the history and ownership of Stark Industries Solutions Ltd., a “bulletproof hosting” provider that came online just two weeks before Russia i
  • KrebsOnSecurity.com marks its 16th anniversary, thanking readers for their engagement over the past year. The site’s 2025 coverage highlighted “comeuppance” against cyber‑crime facilitators, notably Stark Industries Solutions Ltd., whose hosting services supported Kremlin attacks; despite EU sanctions, the owners rebranded and moved assets. Canadian regulator fined Cryptomus $176 million for AML violations. The blog also reported on a $150 million crypto heist linked to stolen LastPass passwords, detailed voice‑phishing operations exploiting Apple and Google services, and smishing kits from China. Additional stories covered Funnull’s role in U.S.‑based money‑laundering sites and Pakistan’s arrest of 21 Heartsender operatives after FBI and Dutch seizures.

Sources: