Snapshot:
On July 13, 2026, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned two individuals and one entity that allegedly provided infrastructure and malware-obfuscation services used by ransomware actors targeting Americans. Treasury stated that these services helped cybercriminals evade detection and facilitate ransomware attacks against U.S. businesses and critical infrastructure.
Why it Matters:
Ransomware continues to generate significant fraud losses, suspicious activity, and sanctions compliance risks for financial institutions. This action highlights regulators’ increasing focus on the broader cybercrime ecosystem and reinforces the need for effective monitoring of ransomware-related payments, virtual asset activity, and potential sanctions exposure.