US Sanctions Russian Bulletproof Hosting Provider for Ransomware Links

Hey, I want to share some important news in the world of cyber. The U.S. government sanctioned Media Land, a Russian "bulletproof hosting" business, because they helped ransomware groups. If this sounds heavy, not to worry, I'll break it down into easier words.

What is a "bulletproof hosting" business?​

A bulletproof hosting provider is a business that provides server and web space to other people, even they use it for malicious online activity.

They continue to espouse grievances, do not take down malicious and harmful material, and keep cybercriminals online.

In other words, they are a landlord who knows criminals live in their property but responds, “No problem, stay as long as you want.”

What action was taken against Media Land?​

The main points:

• The U.S., U.K., and Australia imposed sanctions on Media Land for facilitating ransomware groups.

• Media Land is linked to groups including LockBit, BlackSuit, and Play, who are notorious for attacking businesses and demanding ransom.

• Media Land provided the servers that were used to launch DDoS attacks, meaning they overran websites to the point they went offline.

• Three companies in association with Media Land were also sanctioned:

• Media Land Technology
• Data Center Kirishi
• ML Cloud

• Three individuals were also sanctioned for operating the above networks:

• Aleksandr Volosovik (aka “Yalishanda”)
• Kirill Zatolokin
• Yulia Pankova

• The result of these sanctions impacted those individuals in that the U.S. and its partners froze their assets and forbade businesses from dealing with them.

Why does it matter?​

It matters to me, because it touches all of us who utilize the internet. You may be thinking, "Why does this matter to me?"

Well, here is why:

• Ransomware attacks hurt hospitals, schools and companies - everything we rely on.
• Hosting providers like Media Land avoid any consequences to criminals for being hosted on their platform to continue using it.
• By sanctioning them, the government is attacking cybercrime at its source, rather than just the hackers.

It's like cutting off the water supply instead of cleaning up the flood.

What will happen to these, and all other sanctioned individuals?​

• Disruption: Criminals lose some of their servers, and tools.
• Increased checks: Hosting companies may simply decide to manage tighter controls over who is allowed to host on their servers.
• Criminals flee: The hackers will likely attempt to relocate to other safe places, and the fight continues.

For individuals like you and I, this is also a reminder:
Choose reputable hosting providers, and maintain updated and protected systems.

In closing​

This is thought provoking right? A hosting provider is faced with sanctions because they assisted the criminals in malware ransomware. It exemplifies how governments are genuinely trying to remain serious about stopping cybercrime from the sources.