U.S. Treasury sanctions VPN service tied to ransomware groups

The U.S. Treasury Department sanctioned First VPN Service, also known as 1VPNS, on July 13, 2026, targeting a provider that ransomware groups favored, according to The Record.

Two individuals were also designated. A Ukrainian national alleged to administer 1VPNS was sanctioned alongside the service, The Record and CyberScoop both reported. In a separate but related action, a Belarusian man was sanctioned for allegedly selling software tools called "cryptors."

CyberScoop described cryptors as tools used to disguise ransomware and other malware from detection.