US Indicts Three Russian Nationals Over Bulletproof Hosting Network Linked to Global Cybercrime

 

The EU sanctioned nine Russian citizens and four entities for engaging in cyber-espionage campaigns and attacks against the EU, member states, Ukraine, and other countries. The sanctions were imposed by the Council of the European Union and coordinated with the UK as the first joint action under the cyber sanctions of the EU and the UK. 

According to the EU, the sanctioned entities and individuals are integral parts of Russia’s cyber ecosystem that have supported ransomware perpetrators, phishing campaigns, DDoS services, and attacks on enterprises and government infrastructure. Among the sanctioned entities are Media Land LLC, its owner Alexander Volosovik, and affiliated company ML.Cloud that have allegedly facilitated ransomware and phishing campaigns that have resulted in billions of dollars in damages to enterprises around Europe. 

The pro-Russian hacker group Z-Pentest was also sanctioned for targeting critical infrastructure such as Denmark’s water supply in the December 2024 attack. Along with Z-Pentest’s leader Yuliya Pankratova and the group’s chief hacker Denis Degtyarenko, the EU sanctioned the pro-Russian hacker collective Cyber Army of Russia Reborn (CARR). Cyber Army of Russia Reborn is accused of launching DDoS attacks on government resources worldwide in support of Russia’s war effort against Ukraine since 2022. 

The sanctioned individuals include Evgeniy Bashev, the owner of Impuls LLC, a Russian cyber security firm, and Maksim Voronin, Maksim Gordienko, and Vitaly Kovalov, four Russian hackers. They have been accused of facilitating the development and proliferation of hacking software, including the LummaC2 botnet, Trickbot, and Conti ransomware, which have been used in numerous cybercrime activities in Europe. 

Additionally, the EU sanctioned Ivan Kasyanenko, the deputy commander of Russia’s Main Intelligence Directorate 29155 for allegedly facilitating military and paramilitary activities in Europe and Afghanistan. He has been identified as the person responsible for coordinating cyber operations in Russia against the EU and Ukraine and supporting Wagner Group mercenaries in Africa. Kasyanenko is also accused of being involved in the poisoning of Sergei and Yulia Skripal in the UK in 2018.  

The EU is currently finalizing its 21st sanctions package against Russia, which will involve further economic and trade restrictions. According to the spokesperson, the coordination of cyber sanctions measures by the EU and UK sends a strong signal to Russia that the EU is willing to take more steps to weaken its cyber capacities and disrupt its espionage and disinformation activities in the EU, UK, and critical infrastructure in Europe.