"Cybercrime fighters in the US, UK, and Australia have imposed sanctions on several Russia-linked entities they claim provide hosting services to ransomware gangs Lockbit, BlackSuit, and Play. The sanctions target an organization called "Media Land," an entity that the US Department of Treasury describes as a provider of hosting services to "criminal marketplaces and ransomware actors" and which allowed its infrastructure to be used for "multiple distributed denial-of-service (DDOS) attacks against U.S. victim companies and critical infrastructure.""
"That may be premature, as the USA's announcement includes news that it has continued its actions against Aeza which it says "initiated a rebranding strategy focusing on removing any connections between Aeza and their new technical infrastructure." One step in that rebranding process saw Aeza use a UK-based entity called Hypercore Ltd as a new home for its IP infrastructure, in the hope that doing so would help the Russian outfit evade sanctions. Treasury has now sanctioned Hypercore, too."
US, UK, and Australia imposed sanctions on Media Land and associated Russia-linked hosting entities for supplying 'bulletproof' hosting to ransomware gangs including Lockbit, BlackSuit, and Play. The US Treasury described Media Land as providing hosting to criminal marketplaces and ransomware actors and enabling multiple DDOS attacks against U.S. victim companies and critical infrastructure. Australia cited malware infections and scams, while the UK accused the group of enabling phishing attacks. The measures bar nationals and banks from dealing with Media Land and affiliates. The action follows prior takedowns and sanctions targeting Zservers, Aeza, and now Hypercore Ltd.
Read at Theregister
Unable to calculate read time
Collection
[
|
...
]