OFAC Sanctions VPN Provider and Cryptor Seller for Ransomware Support

Tue, 14 Jul 2026 12:08:08 +0000

Engineer — Skip
SOC/IR — Learn: Useful threat intel context on ransomware-enabling infrastructure being dismantled, but no IOCs, TTPs, or detection surface provided — no immediate hunt or rule work to action.
Leader — Learn: OFAC action signals expanding regulatory pressure on ransomware enablers; no immediate exposure for legitimate enterprises, but worth noting as evidence the sanctions toolkit is being applied to cybercriminal infrastructure.

Threat-Infrastructure on CuraSec