Threat actorRussiaTracked since 2026-09

Yalishanda

Also known as:Media Land bulletproof hostingShadowRelay

As of 2026-09-15, Yalishanda is a Russia-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning phishing. Also known as Media Land bulletproof hosting, ShadowRelay.

Tracked threats: 11 high
First seen: 2026-092026-09-15
Last seen: 2026-092026-09-15
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: RussiaNation or origin

Nation: Russia · 1 tracked threat(s) · Categories: PHISHING

Activity timeline

Yalishanda appears in 1 tracked threat between 2026-09-15 and 2026-09-15.

Tracked threats

Mass Phishing Operation Abuses Fast-Flux DNS to Evade Detection (Yalishanda / ShadowRelay)HIGH2026-09-15