Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Browse News Feed Stats Watchlists Beta About Contact

UK, US and Australia sanction bulletproof hosting providers and executives

Public Sector Action
First reported
Last updated
Happening score
H score 19
1 unique sources, 1 articles

Summary

Hide ▲

The UK, US and Australia sanctioned Media Land, ML.Cloud and Aeza Group plus four Russian executives, moving to disrupt bulletproof hosting that supports ransomware and cybercrime. The action matters because it targets the infrastructure criminals use to hide operations and move money through legitimate channels. It also raises the cost and friction for the sanctioned entities’ business relationships with the West.

Related Happenings

UK Home Office and National Crime Agency Online Crime Centre launching the Online Crime Centre to crack down on fraud and disrupt cyber-criminal operations for Set to begin work

Public Sector Action
First: 09.03.2026 16:00 Last: 09.03.2026 16:00 Sources 1

About this happening: The **UK Home Office** and **National Crime Agency** are launching the **Online Crime Centre** to disrupt **cyber-criminal operations** and fraud at source. The unit, set to begin...

Open Happening

Chinese money ecosystem shift changes threat-actor operations

Threat Actor Meta
First: 28.01.2026 12:30 Last: 28.01.2026 12:30 Sources 1

About this happening: **Chinese money laundering networks (CMLNs)** now include **Xinbi**, a Chinese-language marketplace the **UK’s FCDO** sanctioned for selling **stolen data** and **satellite intern...

Latest development: 26.03.2026 17:42

The UK’s FCDO sanctioned Xinbi, a Chinese-language online marketplace that sells stolen data and satellite internet equipment to scam networks in Southeast Asia, and also targeted #8 Park and Legend Innovation Co as part of the same action; Xinbi is believed to have helped North Korean threat actors launder cryptocurrency stolen in large heists, and Chainalysis says it processed over $19.9 billion between 2021 and 2025.

Open Happening

US-UK-Australia sanctions Media Land bulletproof hosting network

Regulatory/Legal Action
First: 19.11.2025 18:43 Last: 19.11.2025 18:43 Sources 1

How related: The UK, US and Australia have announced sanctions against three prolific bulletproof hosting companies and four Russian executives linked to the organizations.

About this happening: The **United States**, **United Kingdom**, and **Australia** imposed **sanctions** on **Media Land** and other **Russian bulletproof hosting** providers, freezing assets and incre...

Open Happening

OFAC sanctions Chen Zhi and Prince Group targets

Regulatory/Legal Action
First: 14.10.2025 20:37 Last: 14.10.2025 20:37 Sources 1

About this happening: **OFAC** sanctioned **Chen Zhi** and **146 other targets** tied to the **Prince Group**, expanding financial restrictions on a major **pig butchering** scam ecosystem. The action...

Open Happening

DOJ seizure of Prince Group bitcoin tied to Chen Zhi

Law Enforcement
First: 14.10.2025 20:37 Last: 14.10.2025 20:37 Sources 1

About this happening: The **U.S. Department of Justice** seized **$15 billion in bitcoin** from **Chen Zhi** in a **pig butchering** crypto-investment fraud case, sharply increasing pressure on a major...

Open Happening

Timeline

  1. 20.11.2025 11:45 2 articles · 6mo ago

    UK, US and Australia sanction Media Land, ML.Cloud and Aeza Group

    Legal Policy Action Update

    The UK, US and Australia impose coordinated sanctions on Media Land, ML.Cloud and Aeza Group, along with four Russian executives including Alexander Volosovik, Yulia Pankova, Kirill Zatolokin and Andrei Kozlov, to seize property and businesses in the US, UK and Australia and make legitimate banking and Western business channels harder to use. The US also sanctions UK-registered Hypercore, which is said to be a front for Aeza Group.

    Show sources
    Open in new tab
  2. 20.11.2025 11:45 1 articles · 6mo ago

    Sanctioned hosting network linked to ransomware groups and long-running cybercrime support

    Campaign Scope Update

    Media Land, ML.Cloud and Aeza Group are described as bulletproof hosting providers used by ransomware and cybercrime groups including Meduza, Lumma Stealer, BianLian, RedLine, LockBit, Play and BlackSuit, while the UK's National Crime Agency says Alexander Volosovik has been operating since at least 2010 and is associated with Evil Corp, LockBit and Black Basta. Aeza Group is also described as having been previously sanctioned for providing bulletproof hosting for the Russian disinformation outfit Social Design Agency.

    Show sources
    Open in new tab