US Imposes First-Ever Sanctions on a VPN Service for Aiding Ransomware Operators

The US Treasury Department's Office of Foreign Assets Control (OFAC) has announced sanctions against two individuals and a VPN service that, according to the agency, facilitated the operations of ransomware actors and other cybercriminals, including attacks on American citizens and organizations.

Among those named is First VPN Service (1VPNS), which OFAC claims provided its tools to groups engaged in ransomware activity. The sanctions also target a 45-year-old Ukrainian national connected to the service.

The second party named in the case is a seller of a crypter — a software tool used to disguise malicious code from detection systems, allowing attackers to bypass antivirus defenses when distributing ransomware.

The First Case of Its Kind

According to OFAC, this is the first time the US has imposed sanctions specifically on a VPN service for aiding ransomware operators. The agency stressed that such services play a significant role in the infrastructure of cybercriminals, enabling them to conceal their activity and evade tracking by law enforcement.

The sanctions mean the freezing of any assets belonging to the named parties that fall under US jurisdiction, as well as a prohibition on US persons and companies conducting any transactions with them.

The Treasury's move reflects a broader US government strategy to combat the ransomware ecosystem, which encompasses not only the criminal groups themselves but also the providers of supporting infrastructure — VPN services, crypto services, and sellers of tools for concealing malicious code.

Source: The Hacker News