The United States, the United Kingdom, and Australia jointly sanctioned the Russian service provider Zservers, suspected of assisting the LockBit ransomware attacks

ChainCatcher news, according to Chainalysis, the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC), the UK Foreign, Commonwealth & Development Office (FCDO), and the Australian Department of Foreign Affairs and Trade (DFAT) jointly announced sanctions against the Russian bulletproof hosting provider Zservers on February 11, 2025. The company was sanctioned for supporting the attack activities of the LockBit ransomware group.

The sanctions list includes two Russian citizens, Aleksandr Bolshakov and Alexander Mishin, along with their associated cryptocurrency addresses, as well as Zservers and its three cryptocurrency addresses.

On-chain data shows that Zservers has completed over $5.2 million in fund settlements through KYC-free exchanges like Garantex. The company has servers in Russia, Bulgaria, the Netherlands, the United States, and Finland, providing infrastructure support for multiple ransomware organizations.