US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims

U.S. prosecutors have taken significant action against three Russian individuals and two web hosting companies, charging them with offenses related to hacking, conspiracy, and money laundering. These charges stem from their alleged involvement in cyberattacks that inflicted substantial financial damage on American businesses, amounting to tens of millions of dollars. The accused—Alexander Volosovik, Kirill Zatolokin, and Yulia Pankova—are based in St. Petersburg and are said to be the owners of two web hosting entities, Media Land and ML.Cloud. These companies are implicated in providing essential web hosting and infrastructure support to cybercriminals and state-sponsored hackers, facilitating a variety of cyberattacks. Although the charges were first filed in 2024, the indictment was only made public recently. Previously, the U.S. Treasury imposed sanctions on Media Land and ML.Cloud for their role in enabling ransomware groups such as LockBit, BlackSuit, and Play to exploit their infrastructure. These sanctions prohibit American individuals and businesses from engaging in transactions with the Russians or their companies. According to prosecutors, the web hosts were exploited by hackers to conduct distributed denial-of-service (DDoS) attacks, phishing schemes, and assaults on critical infrastructure across the United States. Reports indicate that these cybercriminals targeted numerous American businesses in over 20 states, generating an estimated $62 million in illicit gains. The Justice Department revealed that by marketing their services as a “bulletproof” web host, the companies aimed to protect their customers from legal actions and enforcement efforts. However, capturing the suspects is expected to be challenging, as they reside in Russia, where extradition to the U.S. is uncommon. Russia typically does not honor extradition requests for its citizens, although high-profile criminals have been arrested when traveling to nations with extradition treaties with the U.S. U.S. Assistant Attorney General A. Tysen Duva emphasized the potential dangers posed by these web hosts, stating that their operations endangered the safety of the American public. He assured that efforts to dismantle such networks will continue, reinforcing the commitment to safeguard critical infrastructure from domestic and international cyber threats.