To Shield Hackers and the Dark Web, Russian Hosting Provider Aeza Group Faces Comprehensive Sanctions
本文将梳理Aeza Group的背景与运作模式，并结合链上反洗钱与追踪工具MistTrack的分析以还原其在犯罪生态中的角色。
Original Article Title: "Russian Service Provider Aeza Group Behind Hackers, Dark Web, and Drug Markets Sanctioned"
Original Article Authors: Lisa, Liz, SlowMist Technology
Background
Recently, the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) announced sanctions on Russia-based Aeza Group and its affiliated entities, citing the company's provision of hosting services for ransomware and information-stealing tools.
This sanction includes Aeza Group, its UK front company Aeza International Ltd., two Russian subsidiaries (Aeza Logistic LLC and Cloud Solutions LLC), four executives (CEO Arsenii Penzev, Director Yurii Bozoyan, CTO Vladimir Gast, and Manager Igor Knyazev), and a cryptocurrency wallet (TU4tDFRvcKhAZ1jdihojmBWZqvJhQCnJ4F).
"Cybercriminals continue to heavily rely on bulletproof hosting services like Aeza Group to carry out destructive ransomware attacks, steal U.S. technology, and sell black market drugs," said Deputy Assistant Secretary for Terrorist Financing and Financial Crimes Bradley T. Smith of the U.S. Department of the Treasury. "The Treasury Department will continue to closely cooperate with the UK and other international partners to steadfastly expose the key nodes, infrastructure, and individuals supporting this criminal ecosystem."
This sanction action signifies that international law enforcement agencies are shifting their focus from attackers themselves to the underlying technical infrastructure and service providers. This article will outline Aeza Group's background and operating model, and combine it with an analysis from the on-chain anti-money laundering and tracking tool MistTrack to reconstruct its role in the criminal ecosystem.
Who is Aeza Group?
The Aeza Group is a Bulletproof Hosting (BPH) service provider based in St. Petersburg, Russia, that has long provided dedicated servers and anonymous hosting services to ransomware groups, infostealer operators, and illicit drug trading platforms, among other cybercriminal organizations.
Its clients include notorious infostealer operators such as Lumma and Meduza, who have targeted U.S. defense industrial base and global tech companies; ransomware and data theft groups BianLian and RedLine; and Russia's prominent dark web drug market Blacksprut. Aeza not only provides hosting services to Blacksprut but also participates in its technical infrastructure development. According to OFAC disclosures, Blacksprut has been widely used for the global distribution of fentanyl and other synthetic drugs, posing a significant threat to public safety.
MistTrack Analysis
According to the on-chain anti-money laundering and tracking platform MistTrack's analysis, the sanctioned address (TU4tDFRvcKhAZ1jdihojmBWZqvJhQCnJ4F) has been active since 2023 and has received over $350,000 USDT.
Based on MistTrack analysis, this address has interacted with the following entities:
· Transferred assets to multiple well-known exchanges/OTCs for fund laundering purposes, such as Cryptomus, WhiteBIT, etc.;
· Associated with sanctioned entities like Garantex, Lumma;
· Associated with addresses related to the dark web drug market Blacksprut.
Based on MistTrack's counterparties analysis, the interaction breakdown of this address is as follows:
Upon investigation, the creation timestamp of these two backup URLs coincidentally aligns with the day OFAC announced sanctions on Aeza.
Conclusion
The sanction on Aeza Group demonstrates that global regulations are expanding the target of enforcement from attackers to their underlying technical service networks. Hosting providers, anonymous communication tools, payment channels are becoming the new focus of compliance enforcement. For enterprises, exchanges, and service providers, KYC/AML is no longer optional. Business entities may face sanctions risk if inadvertently engaged with high-risk entities.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
AI investment enters the "Trough of Disillusionment", the next 18 months will be a life-or-death test!
Goldman Sachs believes that the AI investment cycle is currently in the "trough of disillusionment," but this is not the first time. The core contradiction lies in the fact that the business models of new cloud computing providers are highly dependent on end-user returns from AI spending, while currently "there are basically zero companies that can attribute profits to AI." Social Capital founder Palihapitiya has clearly defined an 18-month key window, during which the market will decide which AI business models are sustainable and which are not.
Anthropic's Core Concern: Revenue Can Be Withdrawn at Any Time, but Computing Power Costs Are Locked in for up to 20 Years
Zheshang Securities believes that Anthropic's revenue is mainly based on usage-based billing, with remaining performance obligations covering only about 5.1 months of annualized revenue, while compute power costs are already locked in with $895.4 billion in irrevocable commitments, some extending as far as 2045. Revenues can be reduced at any time, but costs are non-exitable, creating a highly asymmetric maturity gap between the two—this is the company's real core constraint.
Triple Pressure from the Federal Reserve, Treasury, and Congress; Goldman Sachs: Liquidity Crisis May Occur in 2027
Goldman Sachs warns that the reserve ratio of bank assets has dropped to around 11%, only slightly above the crisis trough of 2019. In the second half of 2027, a deadlock in debt ceiling negotiations will force the Treasury to rebuild the TGA, triggering a "perfect storm" of a sharp drop in reserves and a surge in T-bill supply; combined with stalled money market fund buying, this will create a huge liquidity black hole. The Federal Reserve could be forced into the awkward position of lowering interest rates and launching large-scale bond purchases to rescue the market.
Crypto prices
More
