[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsozOxpiCsxbglb7cg_BU7Lx1hIDRHxu8CBV8lIuen00":3},{"article":4,"iocs":51,"watch_terms":52,"solutions":53,"lesson":56},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"4c48afd6-8781-4adf-8e4e-73983aaaca32","US Charges Russian Individuals and Firms for Running Cybercrime Services","us-charges-russian-individuals-and-firms-for-running-cybercrime-services-96b192","The suspects and their companies were previously sanctioned by the United States and its allies. The post US Charges Russian Individuals and Firms for Running Cybercrime Services appeared first on SecurityWeek.","The US Justice Department has indicted three Russian nationals and two companies, ML.Cloud and Media Land, for allegedly operating cybercrime services. These services provided bulletproof hosting used for phishing, DDoS attacks, ransomware, and hosting cybercrime marketplaces, impacting at least 42 entities across 21 US states and causing tens of millions of dollars in losses. The individuals and companies were previously sanctioned by the US and its allies, and the US is now offering a reward for information on the operators.","US indicts three Russian nationals and two companies for running cybercrime services.","https:\u002F\u002Fwww.securityweek.com\u002Fus-charges-russian-individuals-and-firms-for-running-cybercrime-services\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F09\u002FRussian-hacking.jpeg","2026-07-15T11:58:05+00:00","2026-07-15T12:00:10.588131+00:00",8,[17,20,23,25],{"name":18,"type":19},"Russian nationals","threat_actor",{"name":21,"type":22},"ML.Cloud","vendor",{"name":24,"type":22},"Media Land",{"name":26,"type":27},"bulletproof hosting","product","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":28,"icon":30,"name":31,"slug":32},null,"Nation-state","nation-state",[34,39,41,46],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":40},{"id":28,"icon":30,"name":31,"slug":32},{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":47},{"id":48,"icon":30,"name":49,"slug":50},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,24,26],{"controls":54,"vendors":55},[],[],{"slug":57,"title":58,"body":59,"framework_refs":60,"framework_notes":70},"bulletproof-hosting-networks-enable-global-cybercrime-at-scale","Bulletproof Hosting Networks Enable Global Cybercrime at Scale","Russian nationals and their companies exploited bulletproof hosting infrastructure to provide cybercriminals with resilient, hard-to-take-down platforms for phishing, ransomware, DDoS attacks, and illicit marketplaces. The root problem is that malicious hosting providers deliberately operate outside legal jurisdictions or ignore abuse complaints, making takedowns slow and costly. This case highlights how criminal infrastructure-as-a-service dramatically lowers the barrier to entry for cybercriminals worldwide. The impact — 42 organizations across 21 states and tens of millions in losses — underscores how a single hosting ecosystem can amplify harm at enormous scale. International sanctions alone are insufficient; coordinated law enforcement action and proactive network-level defenses are essential.",[61,62,63,64,65,66,67,68,69],"CIS Control 13 – Network Monitoring and Defense","CIS Control 17 – Incident Response Management","NIST SP 800-61 – Computer Security Incident Handling Guide","NIST SP 800-150 – Guide to Cyber Threat Information Sharing","NIST CSF DE.CM-1 – Network Traffic Monitoring","NIST CSF RS.CO-2 – Incidents Reported to Authorities","OFAC Sanctions Compliance – 31 CFR Chapter V","GDPR Article 32 – Security of Processing (for EU-impacted entities)","MITRE ATT&CK T1583.003 – Acquire Infrastructure: Virtual Private Server",{}]