LockBit’s woes continue as gangs’ helpers sanctioned
The United States joined Australia and Britain in targeting Russia-based Zservers service provider for its role in supporting the Lockbit ransomware attacks, the US Department of Treasury announced.
Image by Cybernews.
The United States joined Australia and Britain in targeting Russia-based Zservers service provider for its role in supporting the Lockbit ransomware attacks, the US Department of Treasury announced.
The US Treasury's Office of Foreign Assets Control also designated two Russian nationals who they said were key administrators for Zservers, a bulletproof hosting (BPH) services provider, it added.
The company provided specialized servers and infrastructure, enabling LockBit to hide from authorities’ detection. Two Russian nationals, Alexander Mishin and Aleksandr Bolshakov, who served as key administrators of Zservers, were also sanctioned.
“Ransomware actors and other cybercriminals rely on third-party network service providers like Zservers to enable their attacks on US and international critical infrastructure,” wrote Bradley Smith, acting Under Secretary of the Treasury for Terrorism and Financial Intelligence.
The action follows joint US, UK and Australia cyber sanctions last year targeting the Evil Corp ransomware group, Treasury added.
LockBit’s notoriety made it top target for law enforcement with the highly publicized operation Cronos hitting the cybercartel hard in early 2024. While the gang managed to resume illicit activities, its kingdom is slowly decaying with new operations targeting its infrastructure and operations.