US Indicts Russian Operators of Bulletproof Hosting Network

The indictment, unsealed this week, reveals that these web hosts served as a sanctuary for notorious ransomware operations, including LockBit, BlackSuit, and Play. Prosecutors allege the trio deliberately built their network to ignore law enforcement takedown requests, allowing hackers to launch massive phishing campaigns and distributed denial-of-service attacks that knocked key business services offline. The U.S. Treasury had previously imposed economic sanctions on these entities, prohibiting American businesses from conducting any transactions with the suspects or their firms.

While the defendants remain at large in Russia—a country that historically rejects extradition requests from the U.S.—Assistant Attorney General A. Tysen Duva emphasized that the Justice Department remains committed to dismantling these networks. Law enforcement agencies have successfully apprehended similar high-value targets in the past when they traveled to nations with active extradition agreements. For now, the charges represent a significant effort to expose the infrastructure providers that allow international cybercriminals to profit from American victims.