The U.S. Treasury Department, in coordination with British authorities, has leveled sanctions against a Russian technology company accused of providing vital support to cybercriminal operations, including ransomware attacks, data breaches, and illegal drug sales online.
On Tuesday, the Treasury’s Office of Foreign Assets Control targeted St. Petersburg-based Aeza Group, along with three linked companies and four senior executives. The measures also include a front company in the United Kingdom, sanctioned jointly with the U.K.’s National Crime Agency.
Aeza Group operates as a so-called “bulletproof hosting” provider, offering resilient server infrastructure designed to help cybercriminals evade law enforcement and thwart shutdown attempts. Officials say the firm’s services enabled multiple malware and ransomware groups, including the operators of the Meduza and Lumma infostealers, which have targeted U.S. defense contractors and tech firms. Infostealers harvest personal data, passwords, and credentials from victims’ devices, often serving as a springboard for further cybercrime by selling stolen information on darknet markets.
The company also hosted infrastructure for the BianLian ransomware group, RedLine malware panels, and BlackSprut, a Russian darknet marketplace facilitating anonymous purchases of illicit drugs, including fentanyl precursors and other synthetic opioids. According to the Treasury, these platforms are a growing channel for narcotics flowing into the United States.
“Cybercriminals continue to lean heavily on bulletproof hosting providers like Aeza Group to carry out disruptive ransomware attacks, steal U.S. technology, and peddle black-market drugs,” said Bradley T. Smith, acting undersecretary for terrorism and financial intelligence. He emphasized that the action, taken with the U.K. and other allies, aims to dismantle the core infrastructure and leadership behind cybercrime networks.
The sanctions also cover Aeza International Ltd., a U.K.-based affiliate that leases IP addresses to criminals, and two Russian subsidiaries—Aeza Logistic LLC and Cloud Solutions LLC—all owned or controlled by Aeza Group. The four executives named are CEO Arsenii Penzev, general director Yurii Bozoyan, technical director Vladimir Gast, and current manager Igor Knyazev, all cited for their leadership roles in illicit operations.
As a result, all property and interests in property of the designated individuals and entities under U.S. jurisdiction are frozen, and Americans are barred from dealing with them. Treasury officials warned that both U.S. and foreign persons could face penalties for violations, even without intent.
This move follows a similar OFAC action in February against another bulletproof hosting provider and is part of a broader push to dismantle the infrastructure behind international cybercrime.