OFAC Sanctions FirstVPN and Ransomware Enablers Behind Attacks on Americans
On July 13, 2026, OFAC sanctioned the FirstVPN Service (1VPNS), its administrator Dmytro Rashevskyi, and cryptor vendor Yevgeniy Silayev. The action targeted the anonymity and malware-obfuscation services that ransomware groups rely on, rather than a ransomware group itself. TRM data shows ransomware operators paying the FirstVPN service directly on-chain.
DeFi Intel is an entity-graph aggregator: we curate, tag and link crypto news to a typed knowledge graph of protocols, tokens, people and incidents. We do not republish the full article body. Use the link above to read the original report at Trmlabs_blog.
OFAC's July 13 action designates FirstVPN administrator Dmytro Rashevskyi and Belarusian cryptor vendor Yevgeniy Silayev, blacklisting 20 crypto addresses; ransomware groups Anubis and Qilin had paid the no-logs service.
Entities in this story
Discussion
Comments are reviewed before publication.
Want the full article?
Continue reading on Trmlabs_blog →
No comments yet.