US, UK and Australia sanction Russian cyber firms over ransomware links
Published by Global Banking and Finance Review
Posted on November 19, 2025
2 min readLast updated: January 20, 2026
Published by Global Banking and Finance Review
Posted on November 19, 2025
2 min readLast updated: January 20, 2026
US, UK, and Australia have sanctioned Russian cyber firms, including Media Land, for their involvement in ransomware activities, aiming to disrupt cybercrime networks.
LONDON (Reuters) -The United States, Australia and Britain announced coordinated sanctions on Wednesday against Russia-based web company Media Land, accusing it of supporting ransomware operations.
U.S. Treasury's Office of Foreign Assets Control also designated three members of the Russian company's leadership and three of its sister companies, the Department of Treasury said in a statement.
"These so-called bulletproof hosting service providers like Media Land provide cybercriminals essential services to aid them in attacking businesses in the United States and in allied countries," said John Hurley, under secretary of the treasury for terrorism and financial intelligence.
Britain announced parallel measures, adding Aeza Group LLC to its Russia sanctions regime and six designations under its cyber regime.
Those include Media Land and another hosting provider, ML.Cloud LLC, along with four individuals accused of involvement in malicious cyber activity.
UK sanctions include asset freezes and director disqualification orders for all targets, with travel bans applied to the four individuals.
Aeza Group also faces restrictions on internet and trust services, which prohibit British businesses from providing technical support or hosting services.
ML.Cloud is a Media Land sister company whose technical infrastructure is often used in conjunction with Media Land, including in ransomware and DDOS attacks, the U.S. statement said.
The Russian embassy in London did not immediately respond to a request for comment. Neither Aeza Group nor ML.Cloud immediately responded to a request for comment. It was not immediately possible to reach Media Land.
Australia said it was imposing similar measures to align with its partners, citing the need to disrupt ransomware networks that have hit hospitals, schools and businesses.
(Reporting by Bhargav Acharya in Toronto and Sam Tabahriti in London; Editing by Alison Williams)
Ransomware is a type of malicious software that encrypts a victim's files, making them inaccessible until a ransom is paid to the attacker. It often targets businesses and organizations, leading to significant financial losses.
Sanctions are penalties or restrictions imposed by one country or group of countries on another country, organization, or individual. They are often used to influence behavior or punish actions that violate international laws.
A cyber attack is an attempt to damage, disrupt, or gain unauthorized access to computer systems, networks, or devices. These attacks can lead to data breaches, financial loss, and compromised security.
Bulletproof hosting refers to web hosting services that are tolerant of illegal activities, such as hosting malware or phishing sites. These services often operate in jurisdictions with lax regulations.
Explore more articles in the Headlines category


