U.S. Treasury Sanctions Russian Crypto Wallet Linked to Ransomware Operations

The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) has just added the bulletproof hosting (BPH) services provider Aeza Group to its Specially Designated Nationals (SDN) list, a roster of individuals and organizations that pose threats to U.S. national security.

BPH service providers sell access to internet infrastructures that enable cybercriminals, including ransomware actors, personal information stealers and illegal drug vendors, to evade detection and disruption of their malicious activities.

In a statement, the OFAC says that the US is sanctioning the Russia-based web hosting company for its role in supporting cybercrimes that target victims in the US and around the world.

The agency says the Aeza Group provided BPH services to ransomware and malware groups such as the Meduza and Lumma infostealer operators that targeted U.S. defense industrial base and technology companies.

The Aeza Group also hosted the BianLian ransomware, RedLine infostealer panels and BlackSprut, a Russian darknet marketplace for drugs.

Says Acting Under Secretary of the Treasury for Terrorism and Financial Intelligence Bradley T. Smith,

“Cybercriminals continue to rely heavily on BPH service providers like Aeza Group to facilitate disruptive ransomware attacks, steal US technology, and sell black-market drugs.”

The OFAC also sanctions affiliated companies, including the UK front Aeza International, along with CEO Arsenii Aleksandrovich Penzev, general director Yurii Meruzhanovich Bozoyan, technical director Vladimir Vyacheslavovich Gast and co-owner Igor Anatolyevich Knyazev.

The designation prohibits US transactions involving the properties and interests of the sanctioned groups and individuals.

Generated Image: Midjourney