Treasury Sanctions Exploit Broker Network for Cyber Tools

OFAC Sanctions List Updates

Filed February 24th, 2026

Detected March 1st, 2026

Summary

The U.S. Department of the Treasury's OFAC has sanctioned four individuals and one entity for their involvement in a network that exploits and sells U.S. government cyber tools. These designations are related to Russia-related sanctions and cyber-related activities.

View original document View source feed page

What changed

The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) has added Oleg Vyacheslavovich Kucherov, Azizjon Makhmudovich Mamashoyev, Marina Evgenyevna Vasanovich, and Sergey Sergeyevich Zelenyuk, along with the entity ADVANCE SECURITY SOLUTIONS, to the Specially Designated Nationals (SDN) List. These designations are due to their involvement in a network that exploits and sells U.S. government cyber tools, implicating Russia-related sanctions (CAATSA) and the Program to Address the Illicit Exploitation of Sensitive Information (PAIPA). Zelenyuk is specifically designated under PAIPA Section 2, leading to the blocking of all his property and interests in property, and prohibition of all transactions with him, except for the importation of goods.

These designations impose significant compliance obligations on U.S. persons and entities, as well as foreign entities dealing with U.S. persons. All property and interests in property of the designated individuals and entities that are in the United States or in the possession or control of U.S. persons must be blocked and reported to OFAC. Furthermore, all transactions by U.S. persons or within the United States involving any of the designated parties are prohibited, except for the importation of goods from Zelenyuk. Companies, particularly those in the technology and cybersecurity sectors, should review their customer lists, transaction logs, and business relationships to ensure compliance and avoid any dealings with the sanctioned parties. Failure to comply can result in severe penalties.

What to do next

Block all property and interests in property of the designated individuals and entities that are in the U.S. or in the possession or control of U.S. persons.
Prohibit all transactions by U.S. persons or within the United States involving the designated parties, except for the importation of goods from Sergey Sergeyevich Zelenyuk.
Review customer lists and transaction logs for any connections to the designated individuals and entities.

Penalties

All property and interests in property of the designated individuals and entities are blocked, and all transactions with them are prohibited, except for the importation of goods from Zelenyuk. Civil penalties may apply for violations.

Source document (simplified)

Cyber-related Designations; CAATSA - Russia-related Designations; PAIPA Designations

02/24/2026 Press Release Link Treasury Sanctions Exploit Broker Network for Theft and Sale of U.S. Government Cyber Tools Designation of Russia-Based Zero-Day Exploits Broker and Affiliates for Theft of U.S. Trade Secrets

Specially Designated Nationals List Update

The following individuals have been added to OFAC's SDN List:

KUCHEROV, Oleg Vyacheslavovich (a.k.a. "GABR"), Samara, Russia; DOB 03 Jun 1973; POB Togliatti, Russia; nationality Russia; Gender Male; Secondary sanctions risk: Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201 (individual) [CAATSA - RUSSIA] CYBER4.

MAMASHOYEV, Azizjon Makhmudovich (a.k.a. MAMASHOYEV, Azizjon Maxmudovich), 60 Amir Timur Avenue, Tashkent, Uzbekistan; DOB 20 Feb 1987; nationality Uzbekistan; Gender Male; Secondary sanctions risk: Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201; Passport FA2783585 (Uzbekistan) expires 16 May 2031; National ID No. AD3927969 (Uzbekistan) (individual) [CAATSA - RUSSIA] CYBER4.

VASANOVICH, Marina Evgenyevna (Cyrillic: ВАСАНОВИЧ, Марина Евгеньевна) (a.k.a. VASANOVICH, Marina Yevgenyevna), Russia; DOB 21 Nov 2003; POB Novocherkassk, Rostovskaya Oblast, Russia; nationality Russia; Gender Female; Secondary sanctions risk: Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201; Passport 761424486 (Russia) expires 23 Aug 2029; National ID No. 40 23 685988 (Russia) (individual) [CAATSA - RUSSIA] CYBER4.

ZELENYUK, Sergey Sergeyevich (Cyrillic: ЗЕЛЕНЮК, Сергей Сергеевич) (a.k.a. ZELENYUK, Sergei Sergeevich; a.k.a. ZELENYUK, Sergey Sergeevich; a.k.a. "MORTENOIR"; a.k.a. "SRGSRGSRG111"), Rimsky-Korsakov Prospect, Building 109-111, Litera/Block A, Apartment 20, Saint Petersburg 190068, Russia; DOB 17 Mar 1994; POB Saint Petersburg, Russia; nationality Russia; Gender Male; Secondary sanctions risk: Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201; PAIPA Section 2 Information: BLOCKING OF PROPERTY (individual). Sec.2(b)(2)(a)- All property and interests in property of this individual are blocked, and all transactions with this individual are prohibited, except for the importation of goods.; Tax ID No. 780223642330 (Russia) (individual) [CAATSA - RUSSIA] [CYBER4] [PAIPA].

The following entities have been added to OFAC's SDN List:

ADVANCE SECURITY SOLUTIONS (a.k.a. "ADVANCED SECURITY SOLUTIONS"), R-311-315, Jumeirah Living Marina Gate 3, P.O. Box 121828, Dubai, United Arab Emirates; Tashkent, Uzbekistan; Website advance-sec.com; Secondary sanctions risk: Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201; Organization Established Date 2025; Organization Type: Computer programming activities [CAATSA - RUSSIA] CYBER4.

MATRIX LLC (Cyrillic: ОБЩЕСТВО C OГРАНИЧЕННОЙ OТВЕТСТВЕННОСТЬЮ МАТРИЦА) (a.k.a. LLC MATRITSA; a.k.a. MATRIX LIMITED; a.k.a. MATRIX LTD (Cyrillic: OOO МАТРИЦА); a.k.a. OPERATION ZERO; a.k.a. OPZERO), Sh. Petergofskoe, 73, Letter T, Office 26/1, Room 1, Municipal District Sosnovaya Polyana, Saint Petersburg 198206, Russia; Website opzero.ru; Secondary sanctions risk: Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201; Organization Established Date 27 Sep 2021; Organization Type: Computer programming activities; PAIPA Section 2 Information: BLOCKING OF PROPERTY (entity). Sec.2(b)(1)(A) - All property and interests in property of this entity are blocked, and all transactions with this entity are prohibited, except for the importation of goods.; alt. PAIPA Section 2 Information: LOANS FROM UNITED STATES FINANCIAL INSTITUTIONS. Sec.2(b)(1)(D) - United States financial institutions are prohibited from making loans or providing credits to this entity totaling more than $10,000,000 in any 12-month period, subject to the exception set forth in PAIPA Section 2(b)(1)(D).; alt. PAIPA Section 2 Information: FOREIGN EXCHANGE. Sec.2(b)(1)(H) - Transactions in foreign exchange that are subject to the jurisdiction of the United States and in which this entity has any interest are prohibited.; alt. PAIPA Section 2 Information: BANKING TRANSACTIONS. Sec.2(b)(1)(I) - Any transfers of credit or payments between financial institutions or by, through, or to any financial institution, to the extent that such transfers or payments are subject to the jurisdiction of the United States and involve any interest of this entity, are prohibited.; alt. PAIPA Section 2 Information: BAN ON INVESTMENT IN EQUITY OR DEBT OF SANCTIONED PERSON. Sec.2(b)(1)(J) - Any United States person is prohibited from investing in or purchasing significant amounts of equity or debt instruments of this entity.; Tax ID No. 7807251301 (Russia); Registration Number 1217800148609 (Russia) [CAATSA - RUSSIA] [CYBER4] [PAIPA].

SPECIAL TECHNOLOGY SERVICES LLC FZ, Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates; Secondary sanctions risk: Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201; Organization Established Date 07 Dec 2024; Organization Type: Computer programming activities; PAIPA Section 2 Information: BLOCKING OF PROPERTY (entity). Sec.2(b)(1)(A) - All property and interests in property of this entity are blocked, and all transactions with this entity are prohibited, except for the importation of goods.; alt. PAIPA Section 2 Information: LOANS FROM UNITED STATES FINANCIAL INSTITUTIONS. Sec.2(b)(1)(D) - United States financial institutions are prohibited from making loans or providing credits to this entity totaling more than $10,000,000 in any 12-month period, subject to the exception set forth in PAIPA Section 2(b)(1)(D).; alt. PAIPA Section 2 Information: FOREIGN EXCHANGE. Sec.2(b)(1)(H) - Transactions in foreign exchange that are subject to the jurisdiction of the United States and in which this entity has any interest are prohibited.; alt. PAIPA Section 2 Information: BANKING TRANSACTIONS. Sec.2(b)(1)(I) - Any transfers of credit or payments between financial institutions or by, through, or to any financial institution, to the extent that such transfers or payments are subject to the jurisdiction of the United States and involve any interest of this entity, are prohibited.; alt. PAIPA Section 2 Information: BAN ON INVESTMENT IN EQUITY OR DEBT OF SANCTIONED PERSON. Sec.2(b)(1)(J) - Any United States person is prohibited from investing in or purchasing significant amounts of equity or debt instruments of this entity. [CAATSA - RUSSIA] [CYBER4] PAIPA.