US SANCTIONS VPN, MALWARE PROVIDERS FOR RANSOMWARE

OFAC designated the targets under its sanctions authority for providing services that directly supported ransomware operations. The sanctions block any U.S. assets held by the individuals and entity, and prohibit American companies and citizens from conducting business with them. VPN providers and malware distributors have become critical enablers in the ransomware ecosystem, offering anonymity and technical tools to attackers. By sanctioning these service providers, the Treasury Department aims to disrupt the operational capacity of ransomware groups. The action reflects a broader U.S. strategy to target ransomware infrastructure beyond the attackers themselves. Previous OFAC sanctions have focused on cryptocurrency exchanges and financial facilitators used to launder ransom payments. The sanctions come amid sustained ransomware threats against U.S. critical infrastructure sectors, including healthcare, energy, and finance. Federal agencies have intensified efforts to disrupt ransomware operations and hold accountable those enabling attacks.