Sanctions target Media Land and affiliates — The U.S., Britain and Australia have sanctioned Media Land, three executives and three affiliated firms for allegedly providing hosting services used by ransomware operators. Hypercore Ltd. was also named as a front for Aeza Group. The restrictions freeze access to assets in the three countries and bar businesses there from dealing with the listed entities. Violating institutions risk enforcement actions. The move follows earlier sanctions tied to the LockBit ransomware network.
U.S., Britain and Australia Sanction Russia-Based Web Host Over Alleged Ransomware Support
Sanctions target Media Land and affiliates — The U.S., Britain and Australia have sanctioned Media Land, three executives and three affiliated firms for allegedly providing hosting services used by ransomware operators. Hypercore Ltd. was also named as a front for Aeza Group. The restrictions freeze access to assets in the three countries and bar businesses there from dealing with the listed entities. Violating institutions risk enforcement actions. The move follows earlier sanctions tied to the LockBit ransomware network.
11:23 PM, 11/19/2025Security
On Wednesday, the United States, Britain and Australia announced coordinated sanctions targeting a Russia-based web hosting company accused of providing services that enable ransomware operations and help criminals evade law enforcement.
Officials identified the firm as Media Land, saying it sells access to servers and other internet infrastructure that can be abused by cybercriminals. The Treasury Department said Media Land was sanctioned alongside three members of its leadership team and three affiliated businesses in an action coordinated with the FBI.
The Treasury also named Hypercore Ltd., which it described as a front company for Aeza Group — an internet service provider that was designated by the U.S. earlier this year.
The measures are designed to block the sanctioned companies and individuals from accessing any property or financial assets held in the U.S., Britain and Australia, and to prohibit firms and citizens in those countries from doing business with the designated parties. Financial institutions that violate these restrictions could themselves face sanctions or enforcement actions.
Earlier this year the three governments also sanctioned Russian web-hosting provider Zservers and two men accused of operating that service in support of the LockBit ransomware syndicate.
Why this matters: Ransomware is among the most damaging forms of cybercrime, capable of disrupting local government services, court systems, hospitals, schools and private businesses. Many ransomware gangs operate from former Soviet states, putting them largely beyond the reach of Western courts and complicating enforcement efforts.