Overview
- The Treasury’s Office of Foreign Assets Control designated First VPN Service (1VPNS), its alleged administrator Dmytro Rashevskyi, and cryptor seller Yegeniy Silayev, with the move announced on Monday as part of a coordinated U.S.-U.K. action.
- OFAC blocked any assets these parties hold in U.S. jurisdiction and barred U.S. persons from dealing with them, effectively cutting them off from the U.S. financial system.
- U.S. officials say 1VPNS sold anonymity services to ransomware groups and that Silayev sold 'cryptors,' tools that hide malware from security software, which together helped groups hide attack origins, deploy ransomware, and handle stolen data.
- The sanctions follow a May law enforcement takedown called Operation Saffron that seized about 33 servers across 27 countries, exposed thousands of users, and led to arrests after a multi‑year infiltration of 1VPNS
- Authorities say the measure marks a broader strategy to disrupt the cybercrime supply chain by targeting service providers and tool sellers rather than only the ransomware operators, which could reduce future attacks but also raise questions for lawful privacy services and hosting practices.