CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 2720

As cited

Copy frozen at (site build).

threat intel

Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime

Three Russian nationals were indicted in 2024 for operating bulletproof hosting providers, Media Land and ML.Cloud, that supported cybercriminals conducting attacks on critical infrastructure across 21 U.S. states and multiple countries, resulting in losses exceeding $62 million. The defendants allegedly provided malware and ransomware distribution infrastructure, technical support for phishing and brute-force attacks, and hosted criminal marketplaces. The U.S. Treasury Department and allied governments imposed sanctions on the defendants and their companies in November 2025.

Why it matters: Critical infrastructure operators in any of the 21 affected states and allied nations should investigate whether their systems were targeted, and all practitioners should understand that bulletproof hosting providers remain a key enabler of ransomware and extortion campaigns that directly threaten operational continuity.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary