\n<\/p>\n
The governments of the United States, United Kingdom, and Australia have sanctioned a Russian \u201cbulletproof\u201d web hosting company and several of its related firms for allegedly being used to launch ransomware attacks against U.S. victims and critical infrastructure.\u00a0<\/p>\n
In a statement Wednesday, the U.S. Treasury said<\/a> it imposed coordinated sanctions on the Russia-based web host Media Land and three related companies. The sanctions also target several of the company\u2019s executives, including its general director \u2014 also known as Yalishanda<\/a> \u2014 who allegedly provided servers and troubleshooting to cybercriminals.<\/p>\n Officials say criminal hackers relied on Media Land to launch distributed denial-of-service attacks. Prolific ransomware gangs, including LockBit<\/a>, BlackSuit<\/a>, and Play<\/a> allegedly used it for their infrastructure. The Treasury said several of the company\u2019s employees coordinated with cybercriminals.<\/p>\n \u201cBulletproof\u201d providers are web hosts and cloud companies that typically tout their services as impervious or resilient to law enforcement actions, such as takedowns or legal demands, and as such are commonly used by cybercriminals to host their malicious infrastructure.\u00a0<\/p>\n U.S. officials said hosting companies like Media Land help provide cybercriminals essential services for \u201cattacking businesses in the United States and in allied countries,\u201d though Treasury did not name the victims of the attacks.<\/p>\n The U.K.\u2019s Foreign Office said it was also designating a U.K.-based company called Hypercore, which officials said was set up as a front company for Aeza Group, another bulletproof hosting company that was sanctioned by the U.S. in July<\/a>. The U.K. said in its own statement<\/a> that Aeza is linked to a Kremlin disinformation organization called the Social Design Agency<\/a>.<\/p>\n Sanctioning the companies and individuals involved in cybercrime effectively makes it illegal for citizens, residents, or those with business ties to the U.S., U.K., and Australia from transacting or conducting business with those sanctioned.<\/p>\n U.S. cybersecurity agency CISA and the National Security Agency published guidance<\/a> Wednesday on how organizations can mitigate the risks from bulletproof hosting providers.\u00a0\u00a0<\/p>\n