US, Allies Sanction Russian Bulletproof Ransomware Host

Treasury Links Russian Bulletproof Host Network to Prolific Ransomware Operations Chris Riotta (@chrisriotta) • November 19, 2025

The U.S., Australia and the United Kingdom sanctioned a Russian bulletproof hosting network accused of propping up major ransomware groups - a coordinated strike coming the same day international cyber agencies released guidance aimed at dismantling the infrastructure that keeps those operations alive.

See Also: Thwarting Cyberthreats in the Power Sector

The U.S. Department of Treasury announced Wednesday sanctions targeting Media Land, a St. Petersburg-based bulletproof hosting provider that offers cybercriminals an online presence designed to evade law enforcement detection. Treasury said Media Land backs those operations through a network of companies and executives located in Russia, Serbia and Uzbekistan. The move coincides with new international guidance urging internet service providers and infrastructure operators to tighten know-your-customer checks, filter malicious resources and strengthen abuse reporting to weaken the infrastructure ...