Threat Actor Leaked Data from Major Bulletproof Hosting Medialand

A significant data breach occurred when an unidentified threat actor leaked internal data from Medialand, a major bulletproof hosting (BPH) provider with extensive ties to cybercriminal operations worldwide. The leaked information exposes the infrastructure that has been enabling a wide spectrum of malicious activities, including ransomware deployment, phishing campaigns, and data exfiltration operations. This event […] The post Threat Actor Leaked Data from Major Bulletproof Hosting Medialand appeared first on Cyber Security News.

Apr 8, 2025 - 13:13

Threat Actor Leaked Data from Major Bulletproof Hosting Medialand

A significant data breach occurred when an unidentified threat actor leaked internal data from Medialand, a major bulletproof hosting (BPH) provider with extensive ties to cybercriminal operations worldwide.

The leaked information exposes the infrastructure that has been enabling a wide spectrum of malicious activities, including ransomware deployment, phishing campaigns, and data exfiltration operations.

This event represents a rare window into the normally opaque world of cybercriminal hosting services.

Medialand has long been linked to the notorious threat actor known as Yalishanda (also tracked as LARVA-34), providing critical infrastructure for advanced threat operations.

The hosting service has been instrumental in maintaining servers for various cybercriminal enterprises, including code-signing systems, phishing kits, data exfiltration panels, and ransomware infrastructure associated with groups like BlackBasta.