The UK Government has announced new sanctions targeting a major Russian cybercrime syndicate responsible for enabling attacks on UK businesses and public services. The action underscores a growing recognition that cybersecurity is a core component of national resilience, particularly for sectors relying on digital construction technologies and connected infrastructure. With cyber-attacks costing the UK economy an estimated £14.7 billion in 2024, strengthening defences across digital supply chains has become a priority for both government and industry.
The latest measures focus on Media Land, a long-running operator of so-called bulletproof hosting services. These services provide a protected online infrastructure that allows criminal groups to run ransomware, phishing and malware campaigns while evading law enforcement oversight. Media Land’s systems have supported cyber-attacks affecting UK critical national infrastructure, including organisations in the telecommunications sector, as well as phishing campaigns targeting UK taxpayers and private companies.
Cyber risk management
For the digital construction sector, where cloud-based systems, interconnected devices and Building Information Modelling (BIM) environments are increasingly embedded in project delivery, these developments highlight the importance of robust cyber risk management. Attacks that disrupt data access, compromise project information or target operational technology can halt major projects and expose organisations to financial and reputational damage. The exposure of Media Land reinforces the need for businesses to assess their reliance on third-party digital infrastructure and ensure that security standards extend across the entire project ecosystem.
Coordinated action
Foreign Secretary Yvette Cooper confirmed that the government has coordinated action along with Australia and the United States, designed to disrupt networks that support ransomware groups, including Evil Corp, LockBit and Black Basta. The sanctions also name Media Land’s ringleader, Alexander Volosovik, known online as Yalishanda. Active in the cyber underground for more than a decade, he has worked with several of the most prolific criminal organisations responsible for attacks on UK businesses.
The announcement builds on broader international efforts to counter malicious Russian cyber and hybrid activity. The UK continues to work closely with partners across Europe, with Cooper set to meet German counterpart Johann Wadephul to discuss joint responses to cyber threats. The Government has also sanctioned Aeza Group LLC, another provider of bulletproof hosting services, which has supported Russian disinformation operations targeting democratic institutions.
Cyber resilience
For organisations operating in the built environment, these developments underline the importance of taking a proactive approach to cyber resilience. As digital construction tools and connected systems become standard across planning, design, procurement and site operations, the attack surface for cybercriminals widens. Ensuring secure data environments, conducting regular threat assessments and integrating cybersecurity into procurement and asset management strategies are essential steps in protecting long-term project delivery.
The Government’s actions aim to disrupt global cybercrime networks that threaten economic growth and the security of digital infrastructure. As Cooper stated, the UK and its allies are exposing these networks and pursuing those responsible when states fail to take action. For the digital construction sector, the message is clear: maintaining strong cybersecurity practices is fundamental to safeguarding operations, protecting project data and ensuring resilience across the built environment.
Read next: Shifting from digital twin theory to operational practice – Build in Digital
Are you a building professional? Sign up for a FREE MEMBERSHIP to upload news stories, post job vacancies, and connect with colleagues on our secure social feed.
