US Ransomware and Infostealer Hosting Service penalties

The US Treasury has penalized Russia based in the Aeza Group, with the top copper and a crypto wallet connected to the service, for allegedly hosting ransomware and info-stealers.
Aeza Group, a Bulletproof Hosting (BPH) service provider, is said to sell access to specialized servers and other computer infrastructure to help criminal behavior Ransomware campaigns and steal sensitive informationThe Treasury Office of Foreign Assets Control (OFAC) Says on Tuesday.
Ofac’s penalties also include a Address with $ 350,000 in Crypto.
Crypto users often targeted ransomware and other info-stealers, with blockchain security firm Certik that relates to bulk of $ 2.1 billion in stolen crypto for 2025 to date on phishing attacks that steal sensitive information such as crypto wallet keys.
Aeza Crypto Address is administrative purse
OFAC allows a tron blockchain address to be an administrative purse, handling cash-out from Aeza payment, funding of funds to various crypto exchanges and occasional receiving direct payment for Aeza services, blockchain analytics firm chainalysis Says on Tuesday.
“On-chain review and further research suggest that Aeza relies on a payment processor to receive payments for hosting services, thus obscuring customer deposits monitoring,” the firm added.
Blockchain Intelligence Firm TRM Labs Says On Tuesday that the crypto address also had regular cash-out points to payment service providers and connected via intermediary addresses to other Cybercrime services and the penalty Russian Crypto Exchange Garantex.
OFAC said the Aeza Group, based on St. Lumma Infostealer operatorBianlian ransomware, redline infostealer panels, and blacksprut, a Russian Darknet marketplace.
The Aeza Directors Board is penalized
OFAC also allows members to say it is Aeza’s “Board of Director”, consisting of the CEO and owned by Arsenii Aleksandrovich Penzev, general director and part of the part Yurii Meruzhanovich Bozoyan, technical director Vladimir Vyacheslavich Gast, and Igor Anatolyevich Kyazev, -ari.
He admitted that Kyazev managed the business after Penzev and Bozoyan were arrested for Russian law enforcement in their alleged connection to the forbidden dark black market.
The Penalty That means all US ownership connected to Aeza and the names frozen. It is also illegal for people in the US to conduct any financial transactions or have a business deal with them under the threat of civil and criminal penalties.
Related: US, UK, Australia Sanction Zservers for Crypto Ransomware Lockbit
The implementation of the global law that targets cybercrime infrastructure
The chainalysis said OFAC penalties represent “another significant step” in targeting the major cybercrime infrastructure.
“By punishing bulletproof-hosting providers, the US government attacks the supply chain making large cybercrime possible, rather than just pursuing individual threats of actors after the attack occurs,” the company said.
Meanwhile, the TRM Labs said taking businesses like Aeza ‘reduces the “surface area of abuse” and provides “POI NTS pressure potential to target law enforcement in the ongoing war against Cybercrime.
Magazine: Coinbase Hack shows the law probably won’t protect you: here’s why