The U.S. Department of Justice has brought charges against three individuals from St. Petersburg, Russia, for their alleged roles in providing critical infrastructure to numerous cybercriminal groups. **Aleksandr Volosovik**, identified as the owner of **Media Land**, **Yulia Pankova**, owner of sister company **ML Cloud**, and **Kirill Zatolokin**, responsible for payment collection and service coordination, face a range of charges including conspiracy to commit computer fraud, wire fraud, and money laundering. These 'bulletproof' hosting services are designed to help criminals evade law enforcement detection, offering a resilient platform for illicit operations. ### Multi-Million Dollar Losses and Global Impact The indictment, filed in December 2024, cites 44 unnamed victims who collectively suffered losses exceeding $62 million. These losses are directly attributed to cybercriminal groups that leveraged the services of **Media Land** and **ML Cloud**. Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division emphasized the severity of the threat: “From their overseas safe haven, these defendants ran the criminal infrastructure that powered attacks on critical institutions across our nation. Their actions put the American public at risk.” While the defendants are known residents of St. Petersburg, the absence of an extradition treaty between Russia and the U.S. complicates their apprehension. Russia has also recently advised its citizens against traveling to countries with extradition agreements with the U.S. ### Rewards for Justice Seeks Information Under its Rewards for Justice program, the **State Department** has announced a bounty of up to $10 million for information leading to the arrest or conviction of these individuals. Notably, the announcement also seeks intelligence regarding any potential links between **Media Land**, **ML Cloud**, and foreign government entities. ### Fueling Notorious Cybercrime Gangs and Fraud Forums Authorities revealed that prominent ransomware groups, including **Lockbit**, **BlackSuit**, and **Play**, were among the clients utilizing the services offered by **Media Land** and **ML Cloud**. These hosting providers also supported numerous cybercrime marketplaces specializing in stolen credit card information, such as **Briansclub**, **Cardhouse**, **crdclub**, **Club2crd**, **Verified**, **Fullzinfo**, **Swipestore**, and **Bidencash**. An international operation successfully took down **Bidencash** last year. ### International Collaboration The investigation was a collaborative effort involving U.S. prosecutors and agencies from the Netherlands, in addition to the U.K. and Australia, which had previously sanctioned these entities. Paul Foster, director of the U.K.’s **National Cyber Crime Unit**, highlighted the importance of international cooperation, stating, “This action reflects the strength of close collaboration between international partners to identify, disrupt, and bring cybercriminals to justice.”