US Sanctions Crypto Wallet Linked to Ransomware Hosting Service

The U.S. Treasury has imposed sanctions on the Russia-based Aeza Group, a prominent bulletproof hosting service, and a crypto wallet linked to its operations. This action targets Aeza for allegedly providing infrastructure that facilitates ransomware attacks and the distribution of info-stealers, marking a significant step in disrupting cybercrime supply chains.

Key Takeaways

• The U.S. government is increasingly targeting the foundational infrastructure that enables cybercrime.

• Sanctioning bulletproof hosting providers like Aeza disrupts the supply chain for ransomware and info-stealers.

• On-chain analysis plays a crucial role in identifying and tracing illicit financial flows in cryptocurrency.

• International cooperation and sanctions are vital tools in the ongoing fight against cybercrime.

US Targets Cybercrime Infrastructure

On July 2, 2025, the U.S. Treasury's Office of Foreign Assets Control (OFAC) announced sanctions against the Aeza Group. This move is part of a broader strategy to dismantle the infrastructure supporting large-scale cybercrime, rather than solely pursuing individual threat actors.

Key Sanctioned Entities and Individuals

• Aeza Group: A Russia-based bulletproof hosting (BPH) service provider.

• Crypto Wallet: A Tron blockchain address identified as an administrative wallet for Aeza, handling cash-outs and payments, with approximately $350,000 in crypto.

• Individuals: Four Russian nationals, identified as key figures in Aeza's leadership:

  • Arsenii Aleksandrovich Penzev (CEO and part owner)

  • Yurii Meruzhanovich Bozoyan (General Director and part owner)

  • Vladimir Vyacheslavovich Gast (Technical Director)

  • Igor Anatolyevich Knyazev (Part owner, allegedly managing the business after Penzev and Bozoyan's arrests).

Aeza's Alleged Activities

Aeza Group is accused of selling access to specialized servers and other computing infrastructure to cybercriminals. This infrastructure is used to conduct ransomware campaigns and steal sensitive information. OFAC alleges that Aeza provided BPH services to various malicious groups, including:

• Meduza and Lumma infostealer operators

• BianLian ransomware

• RedLine infostealer panels

• BlackSprut (a Russian darknet marketplace)

Impact of the Sanctions

The sanctions mean that all U.S. assets connected to Aeza and the named individuals are frozen. Furthermore, it is now illegal for U.S. persons to engage in any financial transactions or business dealings with them, under threat of civil and criminal penalties. This action aims to reduce the "surface area of abuse" for cybercriminals and provide leverage points for law enforcement.

On-Chain Analysis and Connections

Blockchain analytics firms, including Chainalysis and TRM Labs, have provided insights into the sanctioned crypto wallet. Chainalysis noted that the wallet was an administrative one, obscuring the traceability of customer deposits by relying on a payment processor. TRM Labs further indicated that the address had regular cash-out points to payment service providers and was connected through intermediary addresses to other cybercrime services, including the sanctioned Russian crypto exchange Garantex.

The address of the Tron administrative wallet that processed payments for Aeza: Chainalysis

Sources

• US Sanctions Ransomware And Infostealer Hosting Service, StartupNews.fyi.

• US Sanctions Ransomware And Infostealer Hosting Service, Cointelegraph.

This article was created with support from AI-driven technology, drawing on multiple reputable sources. The final content has been thoroughly reviewed and edited by BlockzHub's editorial team to ensure accuracy, clarity, and coherence. Original reporting sources are credited whenever appropriate and as required. The opinions expressed in this article do not necessarily represent the official views or positions of BlockzHub. This article is intended for informational purposes only and should not be considered financial or professional advice. Investing involves risk, and you should consult a qualified financial advisor before making any investment decisions.