U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support

The U.S. government has escalated its fight against ransomware by taking the unprecedented step of sanctioning a VPN service provider along with two individuals who allegedly enabled cybercriminals to conduct ransomware operations targeting American entities. This marks the first time a VPN service has faced such penalties, signaling a broadening of the government's approach to combating digital extortion networks that have become increasingly sophisticated and damaging.

The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) designated First VPN Service (1VPNS) and its associated personnel for knowingly providing technical infrastructure that supported ransomware attacks against Americans. According to authorities, the service intentionally catered to cybercriminals by offering tools specifically designed to obfuscate malicious activities and help ransomware operators evade detection. Among those sanctioned is a 45-year-old Ukrainian national who allegedly played a key role in facilitating these criminal enterprises through the VPN provider.

This action against what was essentially a cybercriminal "service provider