U.S. Sanctions VPN Provider and Administrator Linked to Ransomware Operations

The U.S. Treasury has sanctioned First VPN Service (1VPNS) and its administrator Dmytro Rashevskyi for facilitating ransomware attacks. The sanctions also target Belarusian national Yegeniy Vladimirovich Silayev, accused of providing cryptors that help disguise malware. 1VPNS has been linked to ransomware groups since 2014, offering services that conceal attack origins and manage stolen data. The sanctions block all property and interests of the designated parties within U.S. jurisdiction. This action aligns with similar sanctions from the UK and follows a European law enforcement takedown of 1VPNS's infrastructure in May 2026. The Treasury emphasizes that these measures aim to combat the significant financial impact of ransomware on U.S. businesses and critical infrastructure.

Key Points: • U.S. sanctions target First VPN Service and its administrator for aiding ransomware. • Sanctions also include a Belarusian individual providing malware cryptors. • The actions follow a coordinated effort with the UK and a recent European law enforcement takedown.