Central Intelligence
Central IntelligencePERSPECTIVE IS EVERYTHING
Last Update: 08/01/2026 at 2:00 PM EST

US Sanctions VPN Enabling Ransomware

Coverage from BleepingComputer, The Record, and others

Articles

3

Active Days

4

The Topic

US Sanctions VPN Enabling Ransomware topic image

The US Treasury Department sanctioned First VPN Service, also known as 1VPNS, its administrator Dmytro Rashevskyi, and Belarusian cryptor supplier Yegeniy Vladimirovich Silayev for allegedly supporting ransomware and other cybercrime. The action followed a European-led operation, supported by the FBI, that dismantled 1VPNS infrastructure after an investigation spanning several years. The case illustrates an enforcement effort aimed at service providers and malware-tool sellers that help criminal groups conceal infrastructure, identities, and malicious software.

First Article: 07/13/26

Latest Article: 07/16/26

Summary

  • OFAC designated First VPN Service, Dmytro Rashevskyi, and Yegeniy Vladimirovich Silayev over alleged support for ransomware activity.
  • European authorities and the FBI dismantled 1VPNS infrastructure in May and seized 33 servers across 27 countries, according to reporting based on official statements.
  • 1VPNS was marketed on cybercrime forums as a no-logs service that concealed users and infrastructure from law enforcement.
  • Silayev was sanctioned for allegedly selling cryptors that make ransomware and other malware harder for security tools to detect.
  • The sanctions block designated property under US jurisdiction and prohibit US persons from transactions involving the designated parties.
  • Authorities linked the services to attacks affecting businesses, hospitals, financial firms, schools, municipalities, and critical infrastructure providers.

History

07/23/2026

The update mainly adds specificity and scope to the enforcement story: the VPN service is now identified as 1VPNS, and the alleged criminal impact is broadened beyond ransomware to other cybercrime. It also strengthens the takedown account by emphasizing the multi-year investigation and the broader set of victims affected.

07/21/2026

The update adds a concrete enforcement outcome: European authorities and the FBI dismantled First VPN’s infrastructure and arrested its administrator, moving the case from sanctions alone to an operational takedown. It also clarifies the scale of the disruption with server seizures across 27 countries.

Featured

07-14-2026
BleepingComputer / Sergiu Gatlan
US Sanctions VPN, Malware Providers for Enabling Ransomware Attacks
OFAC sanctioned 1VPNS and administrator Dmytro Rashevskyi in connection with Operation Saffron takedown efforts supported by the FBI Boston Field Office, impacting ransomware-related VPN anonymity and user data exposure.
07-13-2026
The Record / Suzanne Smalley
VPN Service Favored by Ransomware Groups Is Sanctioned by US
U.S. Treasury sanctioned First VPN Service in 2026, alleging the VPN provider and administrators supplied ransomware groups with identity-hiding and evasion tools.
07-16-2026
CNET / Alex Valdes
US Sanctions First VPN in Crackdown on Ransomware Criminals
The US Treasury sanctioned First VPN Service and two administrators in 2020s enforcement actions alleging ransomware concealment for attacks on US companies.

Timeline: 4 Days

Jul 13Jul 14Jul 15Jul 16

Additional Articles