Wednesday, January 29, 2025
HomeCyber CrimeTwo European Men Sentenced for Providing 'Bulletproof Hosting' to Hackers

Two European Men Sentenced for Providing ‘Bulletproof Hosting’ to Hackers

Published on

SIEM as a Service

Follow Us on Google News

Two European men were sentenced recently by a US court for giving Bulletproof Hosting services to the hackers, and all these blackhat services were used by the cybercriminals. These two European men are Estonian and Lithuanian natives, Pavel Stassi from Estonia, and Alexander Skorodumov from Lithuania. 

By exploiting these blackhat services hackers distribute the malware to organize attacks mainly on the companies and financial institutions that are organized in the United States.

According to the report, Stassi and Skorodumov both were members of an organization that provided “bulletproof hosting” services founded and run by two Russian citizens, Alexander Grichishkin and Andrey Skvortsov. 

Earlier, 30-year-old Pavel Stassi from Estonia and 33-year-old Alexander Skorodumov from Lithuania have already pleaded guilty. 

The hosting services they provided to hackers from 2009 to 2015 were in demand among the authors of malware targeting the financial institutions in the United States.

Here, the group leased the following things mentioned below:-

  • IP addresses
  • Servers
  • Domains 

All the above elements were used by the cybercriminals to spread malware like:-

  • Zeus
  • SpyEye
  • Citadel
  • Blackhole

In short, by using the above elements, malware, and malicious tools together they execute their attacks to hack the computers, generate botnets, and steal bank credentials.

Skorodumov, one of the leading admins of the hoster, set up and managed domains, IP addresses, and provided customers with support and advice on how they can optimize their malware and botnets.

While Stassi who mainly administered the marketing department has done several false advertisements and used stolen or fake information to register the hosting itself and even the organization’s financial accounts as well.

The defendants also helped their clients to avoid detection by law enforcement agencies by monitoring the blacklisting sites of technical infrastructure used to carry out cybercrime.

Apart from this, all these malware were used against American companies, and the attacks resulted in millions of dollars in losses. As a result, the former admins received 24 months (Stassi) and 48 months (Skorodumov) in prison.

Here, as a lead investigator, the FBI has played a key role and the FBI managed to do so with the help of law enforcement partners in the United Kingdom, Estonia, and Germany.

Looking for Best WAF Solutions for your web applications environment?? Register for Free WAF webinar & explore the experts thoughts and Choose the Best one.. Very limited seats available.. grab it here at .

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Vulnerability in Airline Integration Service enables A Hacker to Gain Entry To User Accounts

A recent security vulnerability in a widely used airline integration service has exposed millions...

Hackers Seize Control of 3,000 Companies Through Critical Vulnerabilities

In a groundbreaking cybersecurity investigation, researchers identified several critical vulnerabilities in a target system,...

PoC Exploit Released for Critical Cacti Vulnerability Let Attackers Code Remotely

A critical vulnerability in the Cacti performance monitoring framework tracked as CVE-2025-22604, has been...

TorNet Backdoor Exploits Windows Scheduled Tasks to Deploy Malware

Cisco Talos researchers have identified an ongoing cyber campaign, active since mid-2024, deploying a...

API Security Webinar

Free Webinar - DevSecOps Hacks

By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes, and release secure applications faster—all while saving time and resources.

In this webinar, join Phani Deepak Akella ( VP of Marketing ) and Karthik Krishnamoorthy (CTO), Indusface as they explores best practices for integrating application security into your CI/CD workflows using tools like Jenkins and Jira.

Discussion points

Automate security scans as part of the CI/CD pipeline.
Get real-time, actionable insights into vulnerabilities.
Prioritize and track fixes directly in Jira, enhancing collaboration.
Reduce risks and costs by addressing vulnerabilities pre-production.

More like this

Salt Typhoon Hacked Nine U.S. Telecoms, Tactics and Techniques Revealed

Salt Typhoon, a state-sponsored Advanced Persistent Threat (APT) group linked to the People's Republic...

FlowerStorm PaaS Platform Attacking Microsoft Users With Fake Login Pages

Rockstar2FA is a PaaS kit that mimics the legitimate credential-request behavior of cloud/SaaS platforms....

Hackers Using YouTube Links and Microsoft 365 Themes to Steal Logins

Cybercriminals are executing sophisticated phishing attacks targeting Microsoft 365 users by employing deceptive URLs...