Media Land LLC

Targeted financial sanction and travel ban

Autonomous Sanctions (Designated Persons and Entities and Declared Persons – Thematic Sanctions) Instrument 2022

Autonomous Sanctions (Designated Persons and Entities and Declared Persons—Thematic Sanctions) Amendment (No. 3) Instrument 2025

Programme AU-CYBLast updated 20 Nov 2025dfat.gov.audfat.gov.au

Prohibition/Restriction

Redacted for Security Reasons

sam.gov

CAATSA - RUSSIA, block and CYBER4

Secondary sanctions risk: Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201

Executive Order 14306 (Cyber)

CAATSA - Section 228

Programme US-CYBReference 53997treasury.govofac.treasury.gov

Prohibition/Restriction

Redacted for Security Reasons

sam.gov

Aircraft Ban, service prohibition, dealing with securities, asset freeze and ship ban

Malicious Russian Cyber Actor, undermining of Ukraine’s sovereignty and territorial integrity

Programme NZ-RSA2022mfat.govt.nz

Depuis 2016, le service d'hébergement pare-balles Media Land LLC facilite toute une série d'attaques par logiciel malveillant contre les États membres et le monde entier, en proposant des services d'hébergement qui dissimulent l'identité des utilisateurs et résistent aux suppressions de contenus par les services répressifs, ce qui a entraîné des pertes financières considérables. Media Land LLC a permis le déploiement d'opérations de rançongiciel à grande échelle, de services de commandement et de contrôle et d'opérations d'hameçonnage ciblant des infrastructures critiques et des services essentiels dans les États membres. Les opérations facilitées par Media Land LLC comprennent, entre autres, LockBit, EvilCorp et BlackBasta. Par conséquent, Media Land LLC est impliquée dans des cyberattaques ayant des effets importants qui constituent une menace extérieure pour les États membres.

Programme EU-CYBgels-avoirs.dgtresor.gouv.frsanctionsmap.eu

Canada is imposing sanctions against 54 entities that contribute to Russia's war efforts, including energy companies and energy trading networks, financial entities enabling sanctions evasion, entities in Russia's artificial intelligence ecosystem and drone manufacturing sector, and procurement and evasion networks supporting Russia's defence-industrial base. Canada is also moving an entity listed under Schedule 3 to Schedule 1.

Programme CA-SEMAinternational.gc.cainternational.gc.ca

1, Part 2

Programme CA-SEMAReference 815international.gc.cainternational.gc.ca

(UE) 2026/1714 du 13/07/2026

Autorité de désignation publiée : Union européenne

Depuis 2016, le service d'hébergement pare-balles Media Land LLC facilite toute une série d'attaques par logiciel malveillant contre les États membres et le monde entier, en proposant des services d'hébergement qui dissimulent l'identité des utilisateurs et résistent aux suppressions de contenus par les services répressifs, ce qui a entraîné des pertes financières considérables. Media Land LLC a permis le déploiement d'opérations de rançongiciel à grande échelle, de services de commandement et de contrôle et d'opérations d'hameçonnage ciblant des infrastructures critiques et des services essentiels dans les États membres. Les opérations facilitées par Media Land LLC comprennent, entre autres, LockBit, EvilCorp et BlackBasta. Par conséquent, Media Land LLC est impliquée dans des cyberattaques ayant des effets importants qui constituent une menace extérieure pour les États membres.

geldefonds.gouv.mc

Asset freeze and director disqualification sanction

The Secretary of State considers that there are reasonable grounds to suspect that MEDIA LAND LLC is or has been involved in relevant cyber activity, in that it has provided support for the commission, planning or preparation of such activity, and has supplied technology and provided technical assistance that could contribute to the commission of relevant cyber activity. MEDIA LAND has operated from St. Petersburg, Russia and has promoted itself as a Bulletproof Hosting (BPH) provider. MEDIA LAND has been involved in relevant cyber activity through its role in providing infrastructure used in ransomware incidents and malicious cyber activity for customers, including those affiliated with the LockBit ransomware group. MEDIA LAND has been identified as a key enabler of the cybercrime ecosystem. Such activity that MEDIA LAND is or has been involved in, directly or indirectly caused, or was intended to cause, economic loss to, or prejudice to the commercial interests of, those affected by the activity.

The Secretary of State considers that there are reasonable grounds to suspect that MEDIA LAND LLC is or has been involved in relevant cyber activity, in that it has provided support for the commission, planning or preparation of such activity, and has supplied technology and provided technical assistance that could contribute to the commission of relevant cyber activity. MEDIA LAND has operated from St. Petersburg, Russia and has promoted itself as a Bulletproof Hosting (BPH) provider. MEDIA LAND has been involved in relevant cyber activity through its role in providing infrastructure used in ransomware incidents and malicious cyber activity for customers, including those affiliated with the LockBit ransomware group. MEDIA LAND has been identified as a key enabler of the cybercrime ecosystem. Such activity that MEDIA LAND is or has been involved in, directly or indirectly caused, or was intended to cause, economic loss to, or prejudice to the commercial interests of, those affected by the activity.

Programme GB-CYBReference 17218Reference CYB0098Last updated 19 Nov 2025gov.ukgov.uk

Programme EU-CYBdocs.google.comsanctionsmap.eu