The U.S. Department of Justice has unsealed an indictment from December 2024, charging three Russian nationals and two Russia-based companies with facilitating extensive cybercrimes that resulted in tens of millions of dollars in losses across the United States.
The individuals named in the indictment are:
- Alexander Alexandrovich Volosovik, 43, of St. Petersburg, Russia.
- Kirill Andreevich Zatolokin, 34, of St. Petersburg, Russia.
- Yulia Vladimirovna Pankova, 29, of St. Petersburg, Russia.
The companies involved are Medialand LLC and ML.Cloud LLC, both headquartered in St. Petersburg. The charges include conspiracy to commit and aid and abet computer fraud, wire fraud, and money laundering.
Bulletproof Hosting Services
Medialand, owned by Volosovik, and ML.Cloud, owned by Pankova during the investigation period, provided specialized server infrastructure designed to evade law enforcement detection. Volosovik promoted these services on underground forums, offering stable setups across various global jurisdictions. Cybercriminals utilized these services to deploy malware, extort digital currencies, host illicit marketplaces, and conduct automated brute-force attacks.
Impact on U.S. Organizations
The indictment details that 42 organizations across 21 states were compromised, affecting sectors such as healthcare, finance, education, media, and government. The infrastructure provided by Medialand and ML.Cloud enabled cybercriminals to execute attacks that disrupted operations and led to significant financial losses.
Government Response
In response to these activities, the U.S. State Department’s Rewards for Justice program has offered a reward of up to $10 million for information linking the defendants or their companies to foreign government entities. Additionally, in November 2025, the Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned the three individuals and their associated companies, including Media Land Technology and Data Center Kirishi, as well as ML.Cloud. The United Kingdom’s Foreign, Commonwealth & Development Office also joined in these sanctions.
This case underscores the critical role that bulletproof hosting services play in enabling cybercriminal activities. By providing infrastructure that resists law enforcement intervention, these services allow malicious actors to operate with impunity. The coordinated international response highlights the necessity of global cooperation in combating cybercrime and disrupting the networks that support it.
