Investigating Anonymous VPS services used by Ransomware Gangs
ID: b67d5533-eff2-510c-9e2b-e393f20a9303
STIX ID: report--b67d5533-eff2-510c-9e2b-e393f20a9303
Feed Name: BushidoToken Blog
Threat Score
This blog examines how BitLaunch (BLNWX), a UK-based anonymous VPS reseller, has been repeatedly used to host Cobalt Strike C2s and other malicious infrastructure tied to ransomware and malware campaigns between 2017–2025, catalogs CTI links and IOCs, assesses the provider's abuse handling, and recommends industry and government actions to reduce anonymous VPS abuse.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.