The U.S. Department of Justice has charged three Russian nationals with operating a cybercrime infrastructure that caused losses exceeding $62 million to American victims.
The December 2024 indictment, unsealed this week, alleges Alexander Volosovik, Kirill Zatolokin, and Yulia Pankova ran St. Petersburg-based companies Media Land and ML.Cloud. Prosecutors state these firms provided "bulletproof" hosting services that shielded prolific ransomware groups, including LockBit and BlackSuit, which have targeted hospitals, schools, and critical infrastructure across 21 states.
The U.S. Treasury Department, coordinating with the UK and Australia, imposed sanctions on the individuals and their companies in November 2025. Such sanctions effectively cut the entities off from global internet infrastructure and financial systems, a potentially crippling blow even if the defendants remain in Russia.
While the indictment does not focus on cryptocurrency, the ransomware ecosystem it describes is deeply intertwined with digital assets. Payments are overwhelmingly demanded in Bitcoin or stablecoins like Tether. Cases like this often accelerate compliance requirements for crypto exchanges, as transactions linked to sanctioned entities can trigger severe penalties from the Office of Foreign Assets Control (OFAC).