Topic: bulletproof hosting
-
CISA Warns of Rising Bulletproof Hosting Threat
CISA and global partners have released a guide to help combat bulletproof hosting, which enables ransomware, phishing, and other cybercrimes by ignoring legal complaints and aiding criminal anonymity. The guide recommends defensive measures like identifying malicious resources, improving traffic ...
Read More » -
U.S. Sanctions Russian Hosting Service for Ransomware Role
The U.S., U.K., and Australia have imposed sanctions on Russian bulletproof hosting services for enabling ransomware operations, cybercrimes, and ignoring law enforcement takedown requests. Key targets include Media Land and its affiliates, which supported ransomware groups like LockBit and facil...
Read More » -
US Charges Operators of Russian Bulletproof Hosting Service
Three Russian nationals, Aleksandr Volosovik, Yulia Pankova, and Kirill Zatolokin, have been indicted in the U.S. for operating bulletproof hosting services that enabled ransomware syndicates to cause over $62 million in damages globally. The defendants' companies, Media Land and ML.Cloud, provid...
Read More » -
Dutch Police Seize 250 Servers in Bulletproof Hosting Crackdown
Dutch law enforcement dismantled a major bulletproof hosting service used exclusively by cybercriminals, seizing approximately 250 physical servers and taking thousands of virtual servers offline. The service facilitated serious criminal activities like ransomware, botnets, and phishing by ignori...
Read More » -
UK, US, Australia Sanction Russian Cyber Host Media Land
The United Kingdom, United States, and Australia have jointly sanctioned three bulletproof hosting providers and four Russian executives for enabling ransomware operators and cybercriminals by supplying critical infrastructure. These services are essential to the cybercrime underworld, allowing t...
Read More » -
Nation-State Hackers Use "Bulletproof" Blockchains to Spread Malware
State-sponsored hackers, including a North Korean group, are now hiding malware within public cryptocurrency blockchains, creating a resilient and nearly untouchable hosting platform. This technique, called "EtherHiding," embeds malicious code in smart contracts on blockchains like Ethereum, leve...
Read More » -
ShadowSyndicate Expands: New Technical Markers Reveal Growth
The ShadowSyndicate cybercrime infrastructure has expanded, with researchers linking dozens of servers through the repeated reuse of specific SSH fingerprints and access keys, revealing continued coordination. The infrastructure supports multiple attack methods, serving as command-and-control nod...
Read More » -
North Korean Hackers' New EtherHiding Crypto Heist
A North Korean hacking group is using EtherHiding, a blockchain-based method that embeds malware in smart contracts, making the blockchain a resilient command-and-control server for malicious activities. EtherHiding resists traditional cybersecurity measures because it operates on a decentralized...
Read More »