The U.S. Department of the Treasury’s Office of Foreign Assets Control announced sanctions against two individuals and one entity for enabling ransomware attacks against Americans. On July 13, 2026, OFAC designated First VPN Service (“1VPNS”), a virtual private network provider that allegedly sells services to ransomware groups, and its administrator Dmytro Rashevskyi. OFAC also designated Yegeniy Vladimirovich Silayev, a Belarusian national who allegedly sells “cryptors”—tools that disguise ransomware and other malware as safe programs to evade detection by security systems. According to OFAC, ransomware groups supported by these designees have caused billions of dollars in losses to businesses and critical infrastructure providers in the United States. This action was coordinated with the United Kingdom’s Foreign, Commonwealth & Development Office, which separately sanctioned other cybercriminals and their enablers, and occurs just months after European law enforcement’s May 2026 takedown of 1VPNS’s website and infrastructure with support from the FBI’s Boston Field Office.
The designations were issued pursuant to Executive Order 13694, as amended by Executive Orders 13757, 14144, and 14306, and in furtherance of President Trump’s Executive Order 14390 of March 6, 2026, “Combatting Cybercrime, Fraud, and Predatory Schemes Against American Citizens.” As a result of the action, all property and interests in property of the designated persons that are in the United States or in the possession or control of U.S. persons are blocked and must be reported to OFAC, and any entity owned 50 percent or more by one or more blocked persons is also blocked.
U.S .Department of Treasury Press Release