The U.S. sanctioned Funnull, a Philippines-based cloud provider used for 'pig butchering' scams, resulting in over $200 million in U.S. victim losses.
Funnull facilitated virtual currency investment scams, including pig butchering schemes where victims lose money through fraudulent cryptocurrency platforms.
Silent Push discovered Funnull hosting gambling sites linked to the Suncity Group and serving as a content delivery network for scam websites.
Amazon and Microsoft cloud providers struggled to remove Funnull's presence despite efforts to counter abuse.
U.S.-based cloud providers are attractive for cybercriminals as blocking traffic can also affect legitimate websites on the same network.
Funnull's use of U.S. cloud providers enables cybercriminals to mask their origins and appear geographically close to their targets, bypassing security measures.
The EU sanctioned Stark Industries Solutions, an ISP used for global proxy networks in Russia's cyberattacks and disinformation campaigns.
Stark Industries Solutions was found to bounce malicious traffic through U.S.-based cloud providers, penetrating U.S. ISPs and providing 'bulletproof' hosting services.
Co-founders of Stark, Ivan and Yuri Neculiti, were sanctioned by the EU for aiding Russian state-sponsored actors in destabilizing activities and cyberattacks.
Stark and the Neculiti brothers enabled Russian actors to conduct cyber-attacks, information manipulation, and interference by hiding their activities from European authorities.