U.S. Cracks Down on Aeza Group for Supporting Hackers and Ransomware Operations

The U.S. Treasury has sanctioned the Russia-based Aeza Group, its leaders, and a crypto wallet linked to the company for allegedly helping cybercriminals run ransomware attacks and steal information.

Aeza Group Sanctioned for Aiding Hackers

Aeza Group, based in St. Petersburg, provides “bulletproof hosting” services, offering servers and tools that help hackers hide their activities. The Treasury says Aeza’s services have supported ransomware gangs and groups that steal sensitive data.

The sanctions include a crypto wallet holding about $350,000, several companies in Russia and the UK, and four Russian nationals linked to Aeza’s leadership.

Crypto users are often targets of hackers and ransomware. Blockchain security firm CertiK says phishing attacks that steal crypto wallet keys are the main reason behind the $2.1 billion loss in 2025.

The U.S. also blacklisted a Tron blockchain wallet used by Aeza to receive payments and send money to crypto exchanges. Blockchain firm Chainalysis says Aeza tried to hide these payments using a payment processor.

Aeza Group Bosses Linked to Hackers

TRM Labs said the wallet has also been connected to other cybercrime groups and the Russian crypto exchange Garantex, which has received sanctions.

Officials believe Aeza helped ransomware and hacking groups like Meduza, Lumma, BianLian, RedLine, and the dark web marketplace BlackSprut.

The U.S. also sanctioned Aeza Group’s leaders, calling them the company’s “board of directors.” This includes CEO Arsenii Penzev, general director Yurii Bozoyan, technical director Vladimir Gast, and part-owner Igor Knyazev.

Authorities say Knyazev is now running Aeza after Penzev and Bozoyan arrests by Russian police for their suspected links to BlackSprut.

Aeza Group Sanctions Aim to Stop Hackers

The sanctions block any U.S. assets connected to Aeza or its leaders. It’s now illegal for Americans to do business with them, and violators could face fines or criminal charges.

Blockchain firm Chainalysis said these sanctions are an important step to fight cybercrime.

“Going after hosting companies like Aeza strikes at the core of cybercrime, not just the hackers,” the company explained.

TRM Labs added that shutting down companies like Aeza makes it harder for criminals to operate and gives law enforcement more tools to catch them.