Skip to content

U.S. Imposes Sanctions on Aeza Group for Providing Global Bulletproof Services Facilitating Cybercrime and Technology Theft, Also Includes Cryptocurrency Address in Designation

Sanctions imposed on Aeza Group due to their provision of secure web hosting services, allowing malicious actors to launch ransomware assaults, overseen by OFAC.

U.S. Government Imposes Sanctions on Aeza Group for Providing Global Bulletproof Service...
U.S. Government Imposes Sanctions on Aeza Group for Providing Global Bulletproof Service Facilitating Criminal Activities and Technological Theft, Including Cryptocurrency Account in Designation

U.S. Imposes Sanctions on Aeza Group for Providing Global Bulletproof Services Facilitating Cybercrime and Technology Theft, Also Includes Cryptocurrency Address in Designation

The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) has taken a significant step in combating large-scale cybercrime by sanctioning Aeza Group LLC, a Russia-based bulletproof hosting provider, on July 1, 2025.

This action targets Aeza Group's international network, including Aeza International Ltd. in the United Kingdom and multiple related companies. The OFAC sanctions aim to disrupt the service providers that enable large-scale cyber threats, such as ransomware attacks and data theft.

The designation of Aeza Group follows the designation of ZServers by OFAC in February 2025. Monitoring for additional addresses and entities connected to Aeza and other bulletproof hosting operations is ongoing.

The report, available on our website, provides insights into the relationship between Aeza Group and crypto crime. Regular payments from the infostealer vendor wallet to Aeza's deposit address at an exchange align with pricing for some of Aeza's services, indicating that this vendor was likely an Aeza customer.

On-chain analysis indicates that Aeza Group relied on a payment processor to receive payments for hosting services, thereby obscuring the traceability of customer deposits. The OFAC-sanctioned TRON cryptocurrency address associated with Aeza Group (address TU4tDFRvcKhAZ1jdihojmBWZqvJhQCnJ4F) has been linked to cryptocurrency exchange platforms including Binance, Huobi, and OKX according to observed on-chain activity.

The designated TRON address associated with Aeza Group received more than $350,000 in crypto and cashed out at various deposit addresses at a variety of exchanges. Deposit addresses Aeza has sent to have also received funds from an escrow service used for selling items on a popular gaming platform, as well as Garantex and a darknet vendor selling an infostealer.

The report is for informational purposes only and does not offer legal, tax, financial, or investment advice. Recipients should consult their own advisors before making decisions based on the report's content. The sanctions include both CAATSA (Russia-related) and cyber-related sanctions authorities.

The OFAC action against Aeza Group is a significant step in targeting infrastructure enabling cybercrime operations. The TRON address associated with Aeza Group has been labeled in a product suite for monitoring.

The report does not guarantee the accuracy, completeness, timeliness, suitability, or validity of the information it contains. The designation of Aeza Group is a continuation of efforts to combat cybercrime, following the designation of ZServers by OFAC in February 2025.

In conclusion, the U.S. government's sanctions on Aeza Group mark a crucial move in the fight against large-scale cybercrime. The ongoing monitoring and investigation into Aeza and related entities will provide valuable insights into the complex world of cybercrime and the infrastructure that supports it.

Read also:

Latest