US Sanctions VPN Service and Malware Cryptor Seller

The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has sanctioned two individuals and a virtual private network (VPN) service provider, First VPN Service (1VPNS), for their alleged role in facilitating ransomware attacks and other cybercriminal activities. OFAC stated that 1VPNS provided its services to ransomware groups, enabling them to mask their online activities and conduct malicious operations, including attacks against U.S. citizens. The sanctions also target a seller of malware cryptors, a type of software used to obscure malicious code, who allegedly supplied these tools to cybercriminals.

This action marks the first time OFAC has designated a VPN service for its involvement in supporting ransomware actors. The individuals sanctioned are identified as 45-year-old Ukrainian national Oleksandr Aleksandrovich Grichishnikov and 38-year-old Russian national Denis Gennadievich Kopylov. Grichishnikov is accused of operating 1VPNS and offering its services to ransomware gangs, while Kopylov is identified as a seller of malware cryptors. The Treasury Department aims to disrupt the financial infrastructure that supports cybercrime by imposing these sanctions.

According to OFAC, the sanctioned individuals and entities are now subject to asset freezes, meaning any property or interests in property they hold that come within U.S. jurisdiction are blocked. Furthermore, U.S. persons are generally prohibited from engaging in transactions with them. The U.S. government continues to prioritize efforts to combat ransomware and hold accountable those who enable such criminal enterprises. This move underscores the Treasury Department's commitment to disrupting the cybercriminal ecosystem by targeting enablers of illicit online activity.