Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

UK, US and Australia sanction bulletproof hosting providers and executives

Public Sector Action
First reported
Last updated
Happening score
H score 25
1 unique sources, 1 articles

Summary

Hide ▲

The UK, US and Australia sanctioned Media Land, ML.Cloud and Aeza Group plus four Russian executives, moving to disrupt bulletproof hosting that supports ransomware and cybercrime. The action matters because it targets the infrastructure criminals use to hide operations and move money through legitimate channels. It also raises the cost and friction for the sanctioned entities’ business relationships with the West.

Related Happenings

OFAC sanctions First VPN Service and two individuals

Regulatory/Legal Action
H score27 First: 14.07.2026 11:02 Last: 14.07.2026 11:02 Sources 1

About this happening: OFAC sanctioned First VPN Service (1VPNS), Dmytro Rashevskyi, and Yegeniy Vladimirovich Silayev for enabling ransomware attacks and helping malicious software...

Open Happening

UK Home Office and National Crime Agency Online Crime Centre launching the Online Crime Centre to crack down on fraud and disrupt cyber-criminal operations for Set to begin work

Public Sector Action
H score31 First: 09.03.2026 16:00 Last: 09.03.2026 16:00 Sources 1

About this happening: The UK Home Office and National Crime Agency are launching the Online Crime Centre to disrupt cyber-criminal operations and fraud at source. The unit, set to begin...

Open Happening

Chinese money ecosystem shift changes threat-actor operations

Threat Actor Meta
H score28 First: 28.01.2026 12:30 Last: 28.01.2026 12:30 Sources 1

About this happening: Chinese money laundering networks (CMLNs) now include Xinbi, a Chinese-language marketplace the UK’s FCDO sanctioned for selling stolen data and satellite intern...

Latest development: 26.03.2026 17:42

The UK’s FCDO sanctioned Xinbi, a Chinese-language online marketplace that sells stolen data and satellite internet equipment to scam networks in Southeast Asia, and also targeted #8 Park and Legend Innovation Co as part of the same action; Xinbi is believed to have helped North Korean threat actors launder cryptocurrency stolen in large heists, and Chainalysis says it processed over $19.9 billion between 2021 and 2025.

Open Happening

US-UK-Australia sanctions Media Land bulletproof hosting network

Regulatory/Legal Action
H score26 First: 19.11.2025 18:43 Last: 19.11.2025 18:43 Sources 1

How related: The UK, US and Australia have announced sanctions against three prolific bulletproof hosting companies and four Russian executives linked to the organizations.

About this happening: U.S. federal prosecutors have unsealed charges against three Russian nationals tied to Media Land and ML.Cloud, accused of providing bulletproof hosting used b...

Open Happening

OFAC sanctions Chen Zhi and Prince Group targets

Regulatory/Legal Action
H score25 First: 14.10.2025 20:37 Last: 14.10.2025 20:37 Sources 1

About this happening: OFAC sanctioned Chen Zhi and 146 other targets tied to the Prince Group, expanding financial restrictions on a major pig butchering scam ecosystem. The action...

Open Happening

Timeline

  1. 20.11.2025 11:45 2 articles · 7mo ago

    UK, US and Australia sanction Media Land, ML.Cloud and Aeza Group

    Legal Policy Action Update

    The UK, US and Australia impose coordinated sanctions on Media Land, ML.Cloud and Aeza Group, along with four Russian executives including Alexander Volosovik, Yulia Pankova, Kirill Zatolokin and Andrei Kozlov, to seize property and businesses in the US, UK and Australia and make legitimate banking and Western business channels harder to use. The US also sanctions UK-registered Hypercore, which is said to be a front for Aeza Group.

    Show sources
    Open in new tab
  2. 20.11.2025 11:45 1 articles · 7mo ago

    Sanctioned hosting network linked to ransomware groups and long-running cybercrime support

    Campaign Scope Update

    Media Land, ML.Cloud and Aeza Group are described as bulletproof hosting providers used by ransomware and cybercrime groups including Meduza, Lumma Stealer, BianLian, RedLine, LockBit, Play and BlackSuit, while the UK's National Crime Agency says Alexander Volosovik has been operating since at least 2010 and is associated with Evil Corp, LockBit and Black Basta. Aeza Group is also described as having been previously sanctioned for providing bulletproof hosting for the Russian disinformation outfit Social Design Agency.

    Show sources
    Open in new tab