US, UK, and Australia sanction Russian ‘bulletproof’ web host used in ransomware attacks

The governments of the US, United Kingdom, and Australia have sanctioned a Russian “bulletproof” internet hosting firm and several other of its associated corporations for allegedly getting used to launch ransomware assaults towards U.S. victims and significant infrastructure. 

In an announcement Wednesday, the U.S. Treasury mentioned it imposed coordinated sanctions on the Russia-based internet host Media Land and three associated firms. The sanctions additionally goal a number of of the corporate’s executives, together with its common director — also referred to as Yalishanda — who allegedly offered servers and troubleshooting to cybercriminals.

Officers say felony hackers relied on Media Land to launch distributed denial-of-service assaults. Prolific ransomware gangs, together with LockBit, BlackSuit, and Play allegedly used it for his or her infrastructure. The Treasury mentioned a number of of the corporate’s staff coordinated with cybercriminals.

“Bulletproof” suppliers are internet hosts and cloud firms that sometimes tout their providers as impervious or resilient to legislation enforcement actions, similar to takedowns or authorized calls for, and as such are generally utilized by cybercriminals to host their malicious infrastructure. 

U.S. officers mentioned internet hosting firms like Media Land assist present cybercriminals important providers for “attacking companies in the US and in allied international locations,” although Treasury didn’t identify the victims of the assaults.

The U.Ok.’s Overseas Workplace mentioned it was additionally designating a U.Ok.-based firm known as Hypercore, which officers mentioned was arrange as a entrance firm for Aeza Group, one other bulletproof internet hosting firm that was sanctioned by the U.S. in July. The U.Ok. mentioned in its personal assertion that Aeza is linked to a Kremlin disinformation group known as the Social Design Company.

Sanctioning the businesses and people concerned in cybercrime successfully makes it unlawful for residents, residents, or these with enterprise ties to the U.S., U.Ok., and Australia from transacting or conducting enterprise with these sanctioned.

U.S. cybersecurity company CISA and the Nationwide Safety Company revealed steering Wednesday on how organizations can mitigate the dangers from bulletproof internet hosting suppliers.