Meet the World’s Biggest ‘Bulletproof’ Hoster
Summary: KrebsOnSecurity reports that a Russian man, Alexander Alexandrovich Volosovik, has for at least a decade run bulletproof hosting services under nicknames including Yalishanda, Downlow and Stas_vl, hosting phishing sites, cybercrime forums, ransomware download servers and Magecart infrastructure. A leaked ChronoPay email archive and a scanned Russian passport tied his stas_vl@mail.ru address to the identity, and Intel 471 says his current service is Media Land LLC in St. Petersburg.
What's compelling: Intel 471 called bulletproof hosting 'probably the biggest enabling service that you find in the underground,' and in one 90-day period in 2017 Volosovik's infrastructure hosted sites tied to Dridex, Zeus and multiple ransomware operations. Research on the dismantled MaxiDed operation found profit margins in this business are so thin that even a marginal increase in operating costs might render it unsustainable.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026