US Treasury Sanctions VPN and Malware Providers for Ransomware Support

• •The U.S. Treasury sanctioned First VPN Service and its administrator for supporting ransomware.
• •Dmytro Rashevskyi and Yegeniy Vladimirovich Silayev were designated for their roles in cybercrime.
• •The sanctions aim to disrupt the infrastructure enabling ransomware attacks that have caused billions in losses.

On July 13, 2026, the U.S. Treasury's Office of Foreign Assets Control (OFAC) sanctioned First VPN Service (1VPNS), its administrator Dmytro Rashevskyi, and malware provider Yegeniy Vladimirovich Silayev for enabling ransomware attacks against U.S. entities. The sanctions target the infrastructure and tools that ransomware groups use, which have caused billions in losses to U.S. businesses and critical infrastructure. 1VPNS has been linked to numerous ransomware operations since 2014, advertising on cybercriminal forums and claiming to maintain no logs of user activities. Rashevskyi allegedly used false identities to procure infrastructure from other providers. Silayev is accused of selling cryptors that disguise malware as legitimate software. This action is part of a broader effort to disrupt the cybercrime ecosystem and was coordinated with the UK government. The sanctions block all property of the designated individuals within U.S. jurisdiction.