Three Russian individuals—Aleksandr Alexandrovich Volosovik, Kirill Andreevich Zatolokin, and Yulia Pankova—and their companies, ML.Cloud and Media Land, have been charged by the US DOJ for running bulletproof hosting services that supported a wide range of cybercriminal activities. These services enabled threat actors, including profit-driven gangs and state-sponsored groups, to conduct phishing, DDoS, brute-force attacks, ransomware campaigns, and host cybercrime marketplaces and forums. The infrastructure spanned multiple countries, including China, the Netherlands, Finland, and the US. The indictment was returned in December 2024 but only unsealed in July 2026. The suspects and companies were previously sanctioned by the US and allied nations. The US government is offering a reward of up to $10 million for information leading to the operators.

The bulletproof hosting services operated by the suspects facilitated a broad spectrum of cybercrime activities, resulting in tens of millions of dollars in losses and targeting at least 42 entities across 21 US states. The infrastructure supported various malicious operations such as phishing, distributed denial-of-service attacks, brute-force attacks, ransomware, and cybercrime marketplaces, enabling threat actors to evade takedown efforts and continue their criminal activities.

This is a law enforcement action targeting the operators of cybercrime infrastructure. No direct patch or technical remediation applies. Organizations should remain vigilant against phishing, DDoS, ransomware, and other attacks potentially originating from such bulletproof hosting services. The US government is actively pursuing these operators, and sanctions are in place. No further mitigation guidance is provided by the vendor or authoritative source.