The United States, in coordination with Australia and the United Kingdom, has announced sanctions against Zservers, a Russia-based bulletproof hosting services provider. The sanctions also target two Russian nationals who operate Zservers for their involvement in supporting LockBit ransomware attacks. Zservers is known for providing cybercriminals access to specialized servers and infrastructure designed to resist law enforcement efforts.
"Russia continues to offer safe harbor for cybercriminals where groups are free to launch and support ransomware attacks against the United States and its allies and partners," stated Tammy Bruce, Department Spokesperson. "Today’s actions underscore the United States’ commitment, along with our international partners, to combating cybercrime and degrading the networks that enable cyber criminals to target our citizens."
The measures taken by the Department of the Treasury were executed under Executive Order 13694, as amended by Executive Order 14144. Additional information can be found in the Treasury's press release.
These actions follow reward offers from the Department of State totaling up to $15 million for individuals connected with the LockBit ransomware variant. A separate reward offer of up to $10 million targets Dmitry Khoroshev, identified as a LockBit ransomware administrator. These rewards are part of the Department’s Transnational Organized Crime Rewards Program.