logo

US sanctions LockBit ransomware’s bulletproof hosting provider

ID: 8cad4984-cb7c-5fc6-aa39-11654bc98ad3

STIX ID: report--8cad4984-cb7c-5fc6-aa39-11654bc98ad3

Feed Name: Bleeping Computer

Threat Score
80/100

Date Published: 2025-02-11

Date Updated: 2026-04-20

Author: Sergiu Gatlan

...
...

The United States, United Kingdom, and Australia sanctioned Russia-based bulletproof hosting provider Zservers, its U.K. front company XHOST, and multiple individuals for supplying infrastructure used by the LockBit ransomware group; authorities linked Zservers' IPs to LockBit control panels and chat servers, and the report also summarizes related arrests, Operation Cronos server seizures (including decryption keys), and estimates that LockBit extorted up to $1 billion across over 7,000 attacks.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.