Skip to content

Incident · Resolved

Media Land Bulletproof Hosting Crackdown

2 stories since NOV 19

2
stories
JUL 14
latest
First reported
Nov 19, 2025
Latest
Jul 14, 2026

The story so far

Media Land, a Russian bulletproof hosting provider used by LockBit, BlackSuit and Play, was sanctioned by the US, the UK and Australia in November 2025. In July 2026, the Justice Department unsealed an indictment charging three Russian nationals along with Media Land and its sister company, ML.Cloud.

Written by the editors

Timeline · 2 stories

Oldest first ↓
  1. PolicyDoJ Sanctions Bulletproof Hosting Provider Used By Ransomware GroupsThe provider, Media Land LLC, has been used by ransomware actors like Lockbit, BlackSuit, and Play, and its infrastructure has been leveraged across several distributed denial-of-service (DDoS) attacks against US companies and critical infrastructure.LINDSEY O'DONNELL-WELCH · 2 MIN
  2. PolicyUnsealed DoJ Indictment Targets Bulletproof Hosting ServicesMedia Land and ML.Cloud offer bulletproof hosting services that help keep threat actors and their infrastructure hidden from law enforcement.LINDSEY O'DONNELL-WELCH · 2 MIN

Newsletter

The Decipher Brief

Every week: the stories, the episode, the clips.

Newsletter sign-up is coming soon.