Bulletproof hosting – there’s a new kid in town

This report describes a large-scale bulletproof hosting operation (primarily on cheap Russian/Ukraine VPS providers accepting WebMoney and with weak vetting) that is actively hosting thousands of cybercrime services—carding forums, spam and phishing sites, malware distribution, and notably 3,620 of 4,117 botnet C&Cs identified by Spamhaus in late 2019—highlighting significant infrastructure abuse and concentrated hosting 'market share' for criminal operations.