Three Countries Just Blocked Hackers’ Secret Weapon
The US, UK, and Australia hit Russian bulletproof hosting providers with coordinated sanctions on November 19, 2024. These companies help ransomware gangs stay online when other hosts would shut them down. The sanctions freeze assets, block Western banking access, and target operators Alexander Volosovik and Kirill Zatolokin.
Core Facts:
- Three countries sanctioned Media Land, ML.Cloud, and Aeza/Hypercore for hosting cybercriminal operations
- These providers helped LockBit, Evil Corp, and Black Basta ransomware groups
- Sanctions block Western financial systems and freeze all company assets
- Cyber-attacks cost UK businesses £14.7 billion in 2024 (0.5% of GDP)
- Ransomware attacks happen every two seconds, with criminals collecting $460 million in H1 2024
Hackers need infrastructure to attack your company. They need servers that don’t shut down when police investigate. They need hosting companies that ignore victim complaints.
Three countries cut off the infrastructure.
The US, UK, and Australia announced coordinated sanctions on November 19. They targeted Russian companies providing “bulletproof hosting” to cybercriminals. These companies let ransomware gangs operate without fear of shutdown.
What is bulletproof hosting?
Regular hosting companies remove your website if you break laws. Bulletproof hosting providers refuse to take down criminal operations.
They ignore law enforcement requests. They dismiss victim complaints. They charge premium prices for this protection.
Alexander Volosovik ran one of these operations for over 14 years. Security researchers called him a “top tier” bulletproof hosting provider worldwide.
His company, Media Land, helped some of the worst ransomware gangs. Groups like LockBit, Evil Corp, and Black Basta used his servers to launch attacks.
Bottom line: Bulletproof hosting gives criminals a safe base to operate from, protected from legal takedown requests.
Why does this affect your business?
Cyber-attacks cost British businesses £14.7 billion in 2024 alone. This equals 0.5% of the entire UK economy.
Your business faces direct financial risk from these attacks.
Ransomware attacks happen every two seconds now. Criminals collected $460 million in six months of 2024. Small businesses hit by ransomware face costs between $120,000 and $1.24 million per incident.
These attacks target businesses of all sizes, not exclusively large corporations.
The numbers: Bulletproof hosting enables the infrastructure behind these billion-dollar losses.
How do these sanctions work?
The sanctions freeze all assets of the targeted companies. They block access to Western financial systems completely. Citizens and companies are prohibited from doing business with these entities.
Australia added criminal penalties and entry bans for the named individuals.
Financial institutions that violate these rules face sanctions themselves. Banks refuse to risk their access to Western markets.
Key mechanism: Financial isolation forces bulletproof hosts offline because they lose payment processing and banking access.
What changes for your business?
These bulletproof hosting providers lose their ability to accept payments. They lose access to normal banking channels. They face obstacles registering new domains or servers.
This makes operations harder for ransomware gangs. They lose their reliable infrastructure and protection.
Fewer attacks will reach your business because criminal infrastructure becomes less stable.
The coordinated approach matters. When three countries act together, criminals lose access to major markets simultaneously. They have no easy fallback option.
Net effect: Disrupted hosting infrastructure means fewer operational ransomware groups targeting businesses.
Does this solve the cybercrime problem?
No single action stops all cybercrime. Criminals will search for new hosting providers and new methods.
This removes major infrastructure enabling thousands of attacks. It disrupts established relationships between hosting providers and ransomware gangs.
Security experts note effectiveness depends on enforcement. Cutting these networks from Western banking systems is the critical step.
The sanctions represent a shift toward international cooperation on cyber threats. Countries recognize cybercrime crosses borders and requires coordinated responses.
Your business benefits from coordinated pressure on cybercriminal infrastructure. Each disruption makes attacks more difficult and more expensive for criminals.
The reality: This does not eliminate cybercrime, but it increases operational costs and risk for criminals.
Frequently Asked Questions
What is bulletproof hosting?
Bulletproof hosting is a service where providers refuse to shut down criminal websites despite law enforcement requests. They charge premium prices to protect illegal operations from takedowns.
Which companies were sanctioned?
Media Land, ML.Cloud, and Aeza/Hypercore were sanctioned, along with operators Alexander Volosovik and Kirill Zatolokin.
Which ransomware groups used these services?
LockBit, Evil Corp, and Black Basta used these bulletproof hosting services to launch attacks on businesses and critical infrastructure.
How much do ransomware attacks cost businesses?
Small businesses face costs between $120,000 and $1.24 million per ransomware incident. UK businesses lost £14.7 billion to cyber-attacks in 2024.
Will these sanctions stop ransomware attacks?
No, but they disrupt major infrastructure criminals rely on. This makes attacks more difficult and expensive to execute.
How often do ransomware attacks happen?
Ransomware attacks occur every two seconds globally. Criminals collected $460 million in the first six months of 2024.
What happens if a company violates these sanctions?
Financial institutions and companies that violate sanctions face penalties themselves, including potential loss of access to Western financial markets.
Why did three countries coordinate these sanctions?
Cybercrime crosses borders. When multiple countries act together, criminals lose access to major markets simultaneously and have fewer places to operate.
Key Takeaways
- The US, UK, and Australia sanctioned Russian bulletproof hosting providers Media Land, ML.Cloud, and Aeza/Hypercore on November 19, 2024
- These sanctions freeze assets, block Western banking access, and prohibit business dealings with sanctioned entities
- Bulletproof hosting enables ransomware gangs by providing infrastructure protected from legal takedowns
- UK businesses lost £14.7 billion to cyber-attacks in 2024, with ransomware attacks happening every two seconds
- Coordinated international sanctions disrupt criminal infrastructure more effectively than individual country actions
- While not eliminating cybercrime, these measures increase operational costs and risks for criminals targeting your business
