Summary

The United States, United Kingdom, and European Union announced sanctions targeting nation-state hackers, cybercriminals, and their enablers in one of the largest cyber enforcement actions to date.

The EU designated Vitaly Nikolayevich Kovalev, also known as “Stern,” administrator of the Trickbot ransomware operations who has received more than $300 million in ransom payments.

In a separate action, OFAC designated First VPN Service (1VPNS), its administrator Dmytro Rashevskyi, and cryptor provider, Yevgeniy Silayev, for enabling ransomware attacks.

The EU also designated individuals and entities linked to LummaC2 infostealer malware, bullet-proof hosting provider Media Land LLC, Russian GRU Unit 29155, and pro-Russia hacktivist groups CARR and Z-Pentest.