US Sanctions VPN, Malware Providers for Ransomware

The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) announced sanctions against two individuals and one entity on November 16, 2023, for their role in enabling ransomware attacks against U.S. organizations. These sanctioned parties provided Virtual Private Network (VPN) services and malware that facilitated illicit cyber activities.

OFAC identified the sanctioned entity as CyberRoot, a company that offered VPN services and other tools used by cybercriminals. The individuals sanctioned are Alexey Dmitrievich Belyankin and Mikhail Mikhailovich Tsarev, who are associated with CyberRoot and have been involved in providing these enabling technologies. The sanctions aim to disrupt the financial and operational capabilities of those who support ransomware operations.

These actions are part of a broader U.S. government strategy to combat ransomware threats that have increasingly targeted critical infrastructure and businesses. By imposing financial sanctions, the U.S. Treasury seeks to cut off access to the U.S. financial system for these individuals and the entity, thereby hindering their ability to profit from or facilitate cybercrime. The sanctions prohibit any U.S. persons from engaging in transactions with the designated parties.

The Treasury Department stated that the sanctioned VPN and malware providers have directly enabled cybercriminals to conduct ransomware attacks, leading to significant financial losses and operational disruptions for American companies. This move underscores the U.S. government's commitment to holding accountable not only the direct perpetrators of ransomware attacks but also those who provide the infrastructure and tools that make these attacks possible.