Middle East Malicious Infrastructure Report: 1,350+ C2 Servers Mapped Across 98 Providers

Reported 21 May 2026 by otx · Severity: medium

Between February and May 2026, over 1,350 active command-and-control servers were identified across 98 infrastructure providers spanning 14 Middle Eastern countries. Saudi Arabia's STC hosted 981 C2 servers, representing 72.4% of all regional malicious infrastructure, the largest