Omegatech LTD

Omegatech LTD is a Seychelles-registered internet infrastructure and hosting organization associated with autonomous system AS202412. During 2026, it announced roughly 3,300 to 4,600 IPv4 addresses across approximately 17–18 /24 network prefixes, including address space geolocated in the Netherlands and Germany. Reporting has described its upstream connectivity as involving PFCLOUD and has alleged relationships with Turkish telecommunications entities; those ownership and operational-location claims are not independently established.

Multiple cybersecurity investigations have characterized Omegatech as a bulletproof hosting provider or a provider of infrastructure with unusually concentrated malicious use. Its network has repeatedly hosted command-and-control, payload-delivery, phishing, spam, and remote-management relay infrastructure associated with criminal malware operations. Malware and campaign activity observed on the network includes Amadey, AsyncRAT, DcRat, Fuery, LummaStealer, NetSupport Manager abuse, OffLoader, Phorpiex/Twizt, Remcos, SmokeLoader, Steaelite RAT, XWorm, and campaigns attributed to the SERPENTINE#CLOUD cluster. Reported abuse also includes credential theft, cryptocurrency clipping and mining, phishing, botnet administration, exploit activity, and bulk spam operations.

Security telemetry cited in 2026 recorded extensive scanning and brute-force traffic originating from addresses announced by AS202412, alongside a high density of malware infrastructure within individual network blocks. This repeated and broad concentration of malicious services has led researchers to recommend risk-based monitoring or blocking of AS202412 where operationally feasible.