US, UK, and Australia sanction Russian ‘bulletproof’ web host used in ransomware attacks

The governments of the United States, United Kingdom, and Australia person sanctioned a Russian “bulletproof” web hosting institution and respective of its related firms for allegedly being utilized to motorboat ransomware attacks against U.S. victims and captious infrastructure. 

In a connection Wednesday, the U.S. Treasury said it imposed coordinated sanctions connected the Russia-based web big Media Land and 3 related companies. The sanctions besides people respective of the company’s executives, including its wide manager — besides known arsenic Yalishanda — who allegedly provided servers and troubleshooting to cybercriminals.

Officials accidental transgression hackers relied connected Media Land to motorboat distributed denial-of-service attacks. Prolific ransomware gangs, including LockBit, BlackSuit, and Play allegedly utilized it for their infrastructure. The Treasury said respective of the company’s employees coordinated with cybercriminals.

“Bulletproof” providers are web hosts and unreality companies that typically tout their services arsenic impervious oregon resilient to instrumentality enforcement actions, specified arsenic takedowns oregon ineligible demands, and arsenic specified are commonly utilized by cybercriminals to big their malicious infrastructure. 

U.S. officials said hosting companies similar Media Land assistance supply cybercriminals indispensable services for “attacking businesses successful the United States and successful allied countries,” though Treasury did not sanction the victims of the attacks.

The U.K.’s Foreign Office said it was besides designating a U.K.-based institution called Hypercore, which officials said was acceptable up arsenic a beforehand institution for Aeza Group, different bulletproof hosting institution that was sanctioned by the U.S. successful July. The U.K. said in its ain statement that Aeza is linked to a Kremlin disinformation enactment called the Social Design Agency.

Sanctioning the companies and individuals progressive successful cybercrime efficaciously makes it amerciable for citizens, residents, oregon those with concern ties to the U.S., U.K., and Australia from transacting oregon conducting concern with those sanctioned.

U.S. cybersecurity bureau CISA and the National Security Agency published guidance Wednesday connected however organizations tin mitigate the risks from bulletproof hosting providers.