U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support
A VPN service and cryptor seller were sanctioned for supporting ransomware attacks.
1Sanctions on VPN Service
The U.S. Treasury sanctioned First VPN Service and its administrator Dmytro Rashevskyi for supporting ransomware attacks. The VPN service claimed not to log user identities or activities.
2Cryptor Seller
Belarusian national Yegeniy Vladimirovich Silayev was sanctioned for selling cryptors to conceal ransomware and other malware. These tools helped evade detection by security software.
3Operation Shutdown
First VPN Service was shut down in May 2026 as part of a joint operation by European and North American authorities. The service was used to obscure the origins of ransomware attacks.
4Victims
Victims of ransomware attacks using the VPN infrastructure included U.S. businesses, financial services companies, hospitals, and municipal governments. The attacks caused billions in damages.
5Fake Identities
Rashevskyi used fake identities like 'Maksim Sorin' and 'Roman Chabanenko' to purchase infrastructure. These identities helped bypass complaints from internet service providers.
6EU and UK Sanctions
The EU and UK sanctioned 24 individuals and entities for Russia's attempts to sow chaos in Europe. These sanctions target Russia's cyber and hybrid operations.