Hosting Providers Face Criminal Prosecution, Not Just Sanctions

U.S. authorities are now treating bulletproof hosting as a criminal infrastructure problem, not just a sanctions issue. That matters because the service layer is what makes abuse scalable: if a provider can quietly rent out normal-looking internet space to criminals, it can support phishing, brute force, malware, and ransomware until it is forced offline or stripped of anonymity. Federal prosecutors unsealed charges against Alexander Alexandrovich Volosovik, Yulia Vladimirovna Pankova, Kirill Andreevich Zatolokin, Media Land, and ML.Cloud. The case ties the providers to cybercrime affecting at least 21 U.S. states and other countries, with losses above $62 million, and the State Department is offering up to $10 million for information tied to the network. The shift from sanctions pressure to public prosecution raises the stakes for the hosts that sit upstream of campaign traffic. For defenders who track abuse from bulletproof hosting, the important change is that disruption can now come through criminal process and informant pressure, not just financial restriction.

Part of the PlainSec briefing for 2026-07-17

Sources