It is run by a Russian organized cybercrime group, Nominum said, and is responsible for millions of dollars in losses tied to the Dridex banking Trojan, and more recently, the Locky ransomware strain.