U.S. Treasury Sanctions Russian Hosting Provider Aeza Group for Enabling Crypto Cybercrimes

The U.S. Department of Treasury's Office of Foreign Assets Control (OFAC) has imposed sanctions on Aeza Group LLC, a Russia-based bulletproof hosting provider, for facilitating cybercrime activities including ransomware attacks and data theft. The July 1, 2025, designation targets the company's global network, spanning affiliates in the UK and other jurisdictions, marking a continued effort to disrupt critical infrastructure supporting illicit cyber operations.

Aeza Group's services allegedly provided resilient hosting infrastructure for cybercriminals, offering dedicated servers from Moscow-based locations to maintain operational security. This action follows OFAC's February 2025 sanctions against ZServers, reinforcing a broader strategy to dismantle service providers enabling large-scale cyber threats.

The sanctions include cryptocurrency address designations, underscoring the growing intersection between cybercrime and digital assets. Chainalysis notes the penalties encompass both cyber-related and CAATSA Russia-related agencies, reflecting a multi-pronged approach to combating financial and technological enablers of malicious activity.