VPN service favored by ransomware groups is sanctioned by US

The US Treasury sanctioned First VPN Service and its Ukrainian administrator for providing infrastructure and tools that enabled ransomware attacks on American critical infrastructure, hospitals, schools and businesses. The action targets the supply chain of ransomware operations rather than individual gangs, disrupting access to anonymity services and obfuscation tools. If you sell infrastructure—hosting, DNS, IP allocation, anonymity tools—to anyone, vet your customers now. The US is sanctioning not ransomware gangs but the providers who enable them, and reputational contagion kills revenue fast.