UK Imposes Sanctions on Russian Cyber Crime Network

Sanctions target individuals and firms linked to a Russian organization facilitating cyber attacks, amid international cooperation with the United States.

On February 11, 2025, the United Kingdom announced sanctions against six individuals connected to a Russian organization implicated in facilitating cyber attacks, specifically ransomware incidents targeting the UK. The measures also encompass firms ZSERVERS and XHOST Internet Solutions LP. This initiative is part of a broader effort to counteract what UK officials describe as 'Russia’s lawless cyber underworld.'

The Foreign Commonwealth and Development Office (FCDO) characterized ZSERVERS as providing critical infrastructure used by cyber criminals for executing ransomware attacks, a form of cybercrime where malicious actors breach computer systems, steal or lock data, and subsequently demand payment—often in cryptocurrency—for its release.

This development coincides with similar sanctions announced by the United States.

Dan Jarvis, the UK Security Minister, emphasized the severity of ransomware perpetrated by Russian-affiliated cyber crime groups, indicating that such threats rank among the most dangerous in the cyber landscape.

Foreign Secretary David Lammy asserted the commitment to collaborate with international partners to 'constrain the Kremlin' and mitigate the impacts of ransomware.

In his remarks following the sanctions, Lammy characterized the Russian state under President Vladimir Putin as a 'corrupt mafia state' where cybercriminal activity thrives.

He assured that the UK government will persist in its efforts to combat these threats, thereby safeguarding national security and economic stability.

The latest sanctions follow previous actions taken last year by the UK, US, and Australia against a leading figure of LockBit, one of the world's most notorious ransomware organizations.

The FCDO indicated that affiliates of LockBit have utilized ZSERVERS in their cyber operations within the UK.

Security Minister Jarvis stressed that the imposition of sanctions aims to diminish the operational capability of cyber criminals by denying them access to essential resources.

He noted, 'With these targeted sanctions and the full weight of our law enforcement, we are countering the threats we face to protect our national security, which is a foundation of our Plan for Change, as well as our economy.'

The US Department of the Treasury issued a statement reinforcing the collaborative stance of the US and UK, asserting that the collective response 'underscores our resolve' in safeguarding national security.

Acting Under Secretary Bradley T. Smith remarked that ransomware perpetrators depend heavily on service providers such as ZSERVERS to launch attacks against critical infrastructure in the US and globally.