“Bulletproof” Lolek hosting site seized as global battle against ransomware intensifies

Authorities seized bulletproof web hosting service LolekHosted and made five arrests for allegedly facilitating ransomware attacks and other malicious activities.

A bulletproof hosting provider is an online infrastructure used specifically to overlook user activities. LolekHosted promised 100% privacy and a strict no-log policy, allowing customers to host “anything but child pornography,” This was reported by the US authorities.

At least 400 networks around the world are believed to have been compromised by attackers who used the provider’s domains over a decade of operations.

How LolekHosted would help cybercriminals

This joint investigation, supported by Europol and the FBI, is just the latest effort in the global battle to curb malware attacks and cybercrime.

“Being willing to ignore customers’ violations doesn’t mean law enforcement will take the same stance,” This is stated in the official statement from Europol.

“The complex investigation of LolekHosted.net revealed how the service enabled the proliferation of information-stealing malware, as well as the launch of DDoS (distributed denial of service) attacks, fictitious online stores, botnet server management, and the spread of spam messages worldwide.”

Authorities took the site offline on August 8, and two days later filed previous charges against its founder, 36-year-old Polish national Artur Grabowski, and at least four other key figures.

(Image credit: Future)

Grabowski has been charged with computer fraud, wire fraud and conspiracy to commit international money laundering. He allegedly facilitated the criminal activities of LolekHosted customers by allowing them to register accounts using false information while keeping no IP address logs of their servers, and has also been accused of ignoring abuse complaints from third parties and Not notifying customers of legal investigations.

Grabowski, who remains a fugitive at the time of writing, is also subject to a $21.5 million seizure order and faces a minimum of 45 years in prison.

Among the allegations, LolekHosted is also being charged for its role in assisting criminals to carry out at least 50 NetWalker ransomware attacks on more than 400 networks worldwide. More than 5,000 bitcoin, worth nearly $146 million at current prices, has reportedly been collected as a ransom for such malicious activities.

Authorities have recently tightened their grip on cybercrime. PowerHost(.)ro was another bulletproof hosting service shut down in June 2023 on similar grounds, while MaxiDed de same fate in 2018.

So while the allegations against LolekHosted have yet to be proven in court, we can certainly expect these investigations and charges to become more and more common.

Related Post