Signal
US sanctions first VPN service and individuals for aiding ransomware groups
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-07-13 18:50 UTCUpdated 2026-07-14 15:41 UTC
rss
cveexploitsbreachesmalwarethreat_actorsadvisories
Trend in the last 24h
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (3 domains)domains are deduped. counts indicate coverage, not truth.3 top sources shown
Overview
The US Treasury Department's Office of Foreign Assets Control (OFAC) has sanctioned First VPN Service (1VPNS), a VPN provider, and its Ukrainian administrator for facilitating ransomware attacks against US entities.
Entities
First VPN Service1VPNSDmytro Rashevskyi
Score total
1.36
Momentum 24h
3
Posts
3
Origins
3
Source types
1
Duplicate ratio
0%
Why now
- The sanctions follow Europol investigations revealing 1VPNS's role in ransomware attacks.
- 1VPNS advertised on cybercrime forums for over a decade, showing persistent criminal facilitation.
- Recent sting operations in May exposed the VPN's deep embedment in cybercriminal ecosystems.
Why it matters
- Sanctioning VPN services disrupts infrastructure used by ransomware groups to evade detection.
- Targeting facilitators like VPN providers and malware sellers weakens ransomware operations.
- Coordinated international sanctions demonstrate growing efforts to combat cybercrime.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
- First VPN Service provided anonymity services to ransomware groups used to hide attack origins and manage stolen data.
- The US Treasury Department sanctioned First VPN Service and its administrator for supporting ransomware operations.
How sources frame it
- The Hacker News: neutral
- CyberScoop: neutral
- The Record: neutral
All evidence
All evidence
Treasury sanctions First VPN Service, others for abetting ransomware gangs
CyberScoop · cyberscoop.com · 2026-07-14 15:41 UTC
U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support
thehackernews · thehackernews.com · 2026-07-14 08:02 UTC
VPN service favored by ransomware groups is sanctioned by US
The Record (Recorded Future News) · therecord.media · 2026-07-13 18:50 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 3Origin domains: 3Duplicates: -
Showing 3 / 0
Top publishers (this list)
- CyberScoop (1)
- thehackernews (1)
- The Record (Recorded Future News) (1)
Top origin domains (this list)
- cyberscoop.com (1)
- thehackernews.com (1)
- therecord.media (1)