The US Attorney has. Three Russian citizens and two web hosts were indicted. Hacking, conspiracy and money laundering for their alleged role in hosting cyber attacks that cost American businesses tens of millions of dollars.

Three Russians, Alexander Volosovic, Kirill Zatolokin and Yulia Pankova, who live in St. Petersburg, are accused of owning and operating two web hosts, Medialand and MLCloud, which allegedly provided web hosting and infrastructure support to criminals and state-sponsored hackers to carry out cyber attacks.

The Russians were first indicted in 2024, but were indicted this week. The US Treasury previously approved Medialand and MLCloud for allowing ransomware gangs including Lockbit, Blacksuit and Play to use their infrastructure. Economic sanctions prevent Americans and American businesses from doing business with Russians or their companies.

Prosecutors said the hackers used the web hosts to launch distributed denial-of-service attacks designed to knock websites and services offline, launch phishing attacks and conduct cyberattacks on critical infrastructure in the United States.

Hackers used these companies to launch attacks on dozens of U.S. businesses in more than 20 states, generating roughly $62 million in cybercrime revenue.

According to the Department of Justice, by presenting their services as “bulletproof” web hosts, the companies intentionally protected their customers from demands and takedowns by law enforcement agencies.

The web host suspects are unlikely to be caught, as the hackers are based in Russia and extradition to the US is unlikely. Russia is known for shielding its citizens from extradition requests abroad, but law enforcement has done so before. High net worth suspects were arrested. When they travel to countries with diplomatic agreements with the United States.

In a statement, U.S. Assistant Attorney General A. Tysen Duva said the web hosts’ actions “put the American public at risk,” adding: “We will continue to dismantle these networks and protect our critical infrastructure from cybercriminals at home and abroad,” Duva said.