Amsterdam police shut down ZServers/XHost, a hub for cybercriminals that offered bulletproof hosting services to hackers.

Explore the threat of Fast Flux in cybersecurity. Learn how malicious actors evade defenses using this sophisticated technique.

Intrinsec reveals shared infrastructure between Eye Pyramid C2 and ransomware groups like Rhysida and Vice Society in new threat intelligence report.

Intrinsec exposes BtHoster, a bulletproof hosting provider behind widespread scanning and malware, revealing its network of shell companies and evasion tactics.

OFAC sanctioned Russia's Aeza Group, a bulletproof hosting provider, and its executives for enabling ransomware, infostealers (Meduza, Lumma), and darknet drug trafficking operations globally.

In a deep-dive into the infrastructure powering some of today’s most prevalent malware campaigns, security researcher Vasilis Orlof uncovers a suspected bulletproof hosting provider operating unde…

A new report exposes ShadowSyndicate, a sophisticated cybercrime group tied to top-tier RaaS affiliates, bulletproof hosting, and suspected geopolitical influence operations.

A new report reveals a network of Ukrainian and offshore hosting providers are fueling large-scale brute-force and password-spraying campaigns to enable global ransomware attacks.

An investigation into the infrastructure of the Clop ransomware gang uncovers Alviva Holding, a provider with deep ties to criminal operations and shell companies.

Resecurity exposed Qilin RaaS's reliance on bulletproof hosting (BPH) in Russia/HK. The same network was linked to the Asahi Group Holdings ransomware attack that stole 27 GB of data.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

CISA, NSA, and FBI released a guide to dismantle Bulletproof Hosting (BPH) networks. It advises ISPs on precision filtering and stricter vetting to curb infrastructure used by ransomware and phishing campaigns.

A new analysis by Team Cymru researchers has shed light on the physical and digital infrastructure powering this underground economy, revealing a network heavily reliant on “bulletproof&#822…

A DNS hijacking campaign abusing old home routers redirected traffic via servers run by Aeza International, a US sanctioned Russian hosting provider.

Group-IB reveals ShadowSyndicate is evolving. The cybercrime cluster now rotates SSH keys to hide its infrastructure. Is it a BPH or IAB?