<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/us-charges-russian-bulletproof-web-hosts-over-cyberattacks-that-netted-62m-from-cybercrime-victim-y2jdxrd3p" -->

---
title: US charges Russian ‘bulletproof’ web hosts over...
description: U.S. prosecutors have unsealed a 2024 indictment charging three Russian nationals and two web hosting companies — Media Land and ML.Cloud — with hacking,...
canonical: https://daily.dev/posts/us-charges-russian-bulletproof-web-hosts-over-cyberattacks-that-netted-62m-from-cybercrime-victim-y2jdxrd3p
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims | daily.dev
og:description: U.S. prosecutors have unsealed a 2024 indictment charging three Russian nationals and two web hosting companies — Media Land and ML.Cloud — with hacking,...
og:url: https://daily.dev/posts/us-charges-russian-bulletproof-web-hosts-over-cyberattacks-that-netted-62m-from-cybercrime-victim-y2jdxrd3p
og:image: https://api.daily.dev/og/posts/Y2JDxrd3p.png
og:image:alt: US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims

**[TechCrunch](https://daily.dev/sources/tc)** · 2 min read · 1 upvotes · 0 comments

## Summary

U.S. prosecutors have unsealed a 2024 indictment charging three Russian nationals and two web hosting companies — Media Land and ML.Cloud — with hacking, conspiracy, and money laundering. The trio allegedly ran 'bulletproof' hosting services that shielded ransomware gangs including LockBit, BlackSuit, and Play from law enforcement, enabling DDoS attacks, phishing campaigns, and critical infrastructure attacks across more than 20 U.S. states. The operations netted approximately $62 million from cybercrime victims. The U.S. Treasury had previously sanctioned the companies. Extradition is considered unlikely given Russia's history of shielding its citizens from overseas legal proceedings.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://techcrunch.com/2026/07/15/us-charges-russian-bulletproof-web-hosts-over-cyberattacks-that-netted-62m-from-cybercrime-victims>

## Questions this post answers

### What is a bulletproof web hosting service and how is it used by cybercriminals?

A bulletproof web host is a hosting provider that deliberately shields customers from law enforcement takedown requests, allowing cybercriminals to operate infrastructure with reduced risk of disruption. Russian providers Media Land and ML.Cloud allegedly offered such services, supporting DDoS attacks, phishing campaigns, and ransomware operations including LockBit, BlackSuit, and Play, which together generated about $62 million from U.S. victims.

_Security teams tracking ransomware infrastructure trends can follow ongoing bulletproof hosting cases on daily.dev._

### Were the Russian nationals behind Media Land and ML.Cloud arrested?

No, Alexander Volosovik, Kirill Zatolokin, and Yulia Pankova remain in Russia and are unlikely to be extradited, since Russia rarely honors U.S. extradition requests for its citizens. U.S. law enforcement has previously only captured such suspects when they traveled to countries with extradition agreements with the United States. The three were charged in 2024, though the indictment was unsealed only recently.

_Anyone monitoring how nation-state shielding affects cybercrime enforcement can track these cases on daily.dev._

## Similar posts on daily.dev

- [US authorities punish sellers of malware and spyware](https://daily.dev/posts/us-authorities-punish-sellers-of-malware-and-spyware-ztmvibvsh) · CSO Online · 0 upvotes · 0 comments
- [DOJ says ransomware gang tapped into Russian government databases](https://daily.dev/posts/doj-says-ransomware-gang-tapped-into-russian-government-databases-hmfbviv8l) · TechCrunch · 0 upvotes · 0 comments
- [Infosec exec sold eight zero-day exploit kits to Russia: DoJ](https://daily.dev/posts/infosec-exec-sold-eight-zero-day-exploit-kits-to-russia-doj-ctw0rquot) · The Register · 0 upvotes · 0 comments

---

Tags: [#cyber](https://daily.dev/tags/cyber), [#ransomware](https://daily.dev/tags/ransomware)

[View this post on daily.dev](https://daily.dev/posts/us-charges-russian-bulletproof-web-hosts-over-cyberattacks-that-netted-62m-from-cybercrime-victim-y2jdxrd3p)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims","url":"https://daily.dev/posts/us-charges-russian-bulletproof-web-hosts-over-cyberattacks-that-netted-62m-from-cybercrime-victim-y2jdxrd3p","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/us-charges-russian-bulletproof-web-hosts-over-cyberattacks-that-netted-62m-from-cybercrime-victim-y2jdxrd3p"},"datePublished":"2026-07-15T14:23:01.669Z","dateModified":"2026-09-14T06:13:31.231Z","description":"U.S. prosecutors have unsealed a 2024 indictment charging three Russian nationals and two web hosting companies — Media Land and ML.Cloud — with hacking,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8f7b13b4b9fd72de7f88eb1920c589f8?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8f7b13b4b9fd72de7f88eb1920c589f8?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"TechCrunch","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"TechCrunch","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tc","url":"https://daily.dev/sources/tc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/us-charges-russian-bulletproof-web-hosts-over-cyberattacks-that-netted-62m-from-cybercrime-victim-y2jdxrd3p","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,ransomware","timeRequired":"PT2M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"TechCrunch","item":"https://daily.dev/sources/tc"},{"@type":"ListItem","position":3,"name":"US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims"}]}
{"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/us-charges-russian-bulletproof-web-hosts-over-cyberattacks-that-netted-62m-from-cybercrime-victim-y2jdxrd3p#faq","mainEntity":[{"@type":"Question","name":"What is a bulletproof web hosting service and how is it used by cybercriminals?","acceptedAnswer":{"@type":"Answer","text":"A bulletproof web host is a hosting provider that deliberately shields customers from law enforcement takedown requests, allowing cybercriminals to operate infrastructure with reduced risk of disruption. Russian providers Media Land and ML.Cloud allegedly offered such services, supporting DDoS attacks, phishing campaigns, and ransomware operations including LockBit, BlackSuit, and Play, which together generated about $62 million from U.S. victims. Security teams tracking ransomware infrastructure trends can follow ongoing bulletproof hosting cases on daily.dev."}},{"@type":"Question","name":"Were the Russian nationals behind Media Land and ML.Cloud arrested?","acceptedAnswer":{"@type":"Answer","text":"No, Alexander Volosovik, Kirill Zatolokin, and Yulia Pankova remain in Russia and are unlikely to be extradited, since Russia rarely honors U.S. extradition requests for its citizens. U.S. law enforcement has previously only captured such suspects when they traveled to countries with extradition agreements with the United States. The three were charged in 2024, though the indictment was unsealed only recently. Anyone monitoring how nation-state shielding affects cybercrime enforcement can track these cases on daily.dev."}}]}
```

