Particle.news
Download on the App Store

US, UK and Australia Sanction Russian ‘Bulletproof’ Host Media Land, Cite Ransomware Ties

The action seeks to cut off ransomware infrastructure by freezing assets, banning transactions, and issuing guidance for network defenders.

Overview

  • Officials named Media Land and three sister firms — ML Cloud, Media Land Technology and Data Center Kirishi — as providers of infrastructure used for ransomware, phishing and DDoS operations.
  • Authorities also identified three executives — Aleksandr Volosovik, known as “Yalishanda,” Kirill Zatolokin and Yulia Pankova — alleging roles in running and financing the network.
  • The designations freeze property in the US, UK and Australia, bar their citizens and companies from dealings, and expose violators to enforcement or secondary sanctions.
  • Britain added measures including travel bans and director disqualification orders, while Australia warned that providing assets to the targets can carry prison terms and heavy fines.
  • Allied agencies released guidance for ISPs and defenders on countering bulletproof hosting, and the UK cited links to groups such as LockBit, BlackSuit/Play, Evil Corp and Black Basta; Aeza Group and its front company Hypercore were also cited.