Key facts
- Britain has imposed new sanctions on Russian cyber networks, including ZSERVERS and Media Land.
- The sanctions target individuals and entities involved in cybercrime, ransomware, and hybrid operations.
- GRU leadership figures were sanctioned for directing cyber threat operations.
- ZSERVERS and its UK front company XHOST Internet Solutions LP were targeted for providing infrastructure for cybercriminals.
- Media Land, a "bulletproof" hosting service provider, and its ringleader Alexander Volosovik were also sanctioned.
- The UK's action was coordinated with Australia and the United States.
Britain has announced a new package of sanctions targeting Russian cyber networks, which it blames for attempting to sow chaos and division across Europe. The action, coordinated with Australia and the United States, aims to disrupt illicit Russian cybercrime operations and strengthen UK national security.
The sanctions target 24 individuals and entities involved in destructive cyber and hybrid operations, including cybercriminals linked to Russian Intelligence Services. Among those sanctioned are GRU senior leadership figures Vyacheslav Stafeyev, Ivan Senin, and Ivan Kasyanenko, for their roles in directing GRU cyber and hybrid threat operations.
Specifically targeted is ZSERVERS, described as a key component of the Russian cybercrime supply chain, along with six of its members and its UK front company, XHOST Internet Solutions LP. ZSERVERS provides vital infrastructure for cybercriminals, enabling ransomware attacks and the execution of illegal activities. The illicit supply chain supports notorious ransomware gangs by masking their operations and storing stolen data.
Additionally, the UK has sanctioned Media Land, identified as one of the most significant operators of "bulletproof" hosting services. These services provide online infrastructure that enables cybercriminals to conduct illegal activities such as ransomware and phishing attacks. The ringleader of Media Land, Alexander Volosovik, also known as Yalishanda, who has been active in the cyber underground since at least 2010 and worked with groups like Evil Corp and LockBit, was also targeted.
Foreign Secretary David Lammy stated that Putin has built a corrupt mafia state where "unscrupulous extortionists and cyber-criminals run rampant," and that the government will continue to work with partners to constrain the Kremlin and Russia's "lawless cyber underworld." Minister of State for Security Dan Jarvis emphasized that ransomware attacks by Russian-affiliated gangs are among the most harmful cyber threats, and denying cybercriminals the tools of their trade weakens their capacity to cause harm.
Cyber-attacks are estimated to have cost British businesses £14.7 billion in 2024, accounting for 0.5% of GDP. The sanctions are part of a broader strategy to crack down on Russian cybercriminals and protect national security.