In a combined endeavor, Australia, the United Kingdom, and the United States on Tuesday sanctioned Zservers, the Russia-based service provider, and two Russian nationals serving as its operators for their involvement in ransomware attacks.
“In coordination with Australia and the United Kingdom, the United States is today sanctioning Zservers, a Russia-based bulletproof hosting (BPH) services provider, and two Russian nationals serving as Zservers operators, for their roles in supporting LockBit ransomware attacks,” the statement by US Department of State read.
Zservers has promoted BPH services cybercriminal platforms to evade law enforcement investigations and takedowns and has been scrutinized by cybersecurity firms.
Zservers provides cybercriminals access to specialized servers and other computer infrastructure designed to resist law enforcement action. It has provided BPH services, including leasing numerous IP addresses, to LockBit affiliates, that have used the hosting services to coordinate and launch ransomware attacks.
Russia has been alleged to shelter cybercriminals that are able to execute ransomware attacks against the United States and its allies and partners. According to the sanctions imposed, all the properties associated with the blacklisted Russian nationals are blocked.
“Today’s actions underscore the United States’ commitment, along with our international partners, to combating cybercrime and degrading the networks that enable cyber criminals to target our citizens,” the statement read.
