Tracking Threats, Incidents, and Vulnerabilities
Tracking Threats, Incidents, and Vulnerabilities
US, UK, Australia sanction Russian bulletproof hosting provider Media Land for supporting ransomware and cybercrime. The provider offers services to criminals, enabling phishing and DDoS attacks. Sanctions freeze assets and target related executives. Joint guidance issued to mitigate risks posed by bulletproof hosting providers.
Dutch police seized 250 servers from a bulletproof hosting service used by cybercriminals for anonymity in illegal activities, including ransomware and phishing. This operation revealed significant connections to over 80 cybercrime investigations. The company promoted complete user anonymity and refused cooperation with law enforcement. A forensic analysis of the servers is underway to uncover more details about its operators and clients, though no arrests have been reported yet.
TLDR: aurologic GmbH is a key German hosting provider supporting high-risk networks linked to cybercrime. Established in 2023, it provides services to many threat activity enablers like Aeza Group and Global-Data System, despite increasing scrutiny and sanctions. The company’s operational neutrality raises concerns about accountability in the internet hosting ecosystem, as it facilitates malicious activities while complying legally. Notable downstream customers have been linked to various malware and cybercrime infrastructures, indicating aurologic's significant role in the ongoing challenges of managing malicious online activities.
https://www.recordedfuture.com/research/malicious-infrastructure-finds-stability-with-aurologic-gmbh
