Following U.S. Treasury sanctions imposed on July 1, 2025, the notorious bulletproof hosting provider Aeza Group has rapidly migrated its infrastructure to a new autonomous system in an apparent attempt to evade enforcement measures. The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) designated Aeza Group, two affiliated companies, and four individuals for providing bulletproof hosting services that enabled global cybercriminal activity, including ransomware operations, data theft, and darknet drug trafficking. The newly allocated autonomous system, established just ten days before the migration, already contains over 2,100 IP addresses, indicating an unusually rapid operational ramp-up that security experts believe represents a coordinated effort to maintain cybercriminal hosting services under new infrastructure. This enforcement action targeted AS216246 and AS210644, autonomous systems that Silent Push threat analysts had previously identified as bulletproof hosting providers in early 2025. This autonomous system number was allocated on July 10, 2025, to Hypercore LTD, according to Silent Push’s Total View platform data.
This Cyber News was published on cybersecuritynews.com. Publication date: Fri, 25 Jul 2025 10:35:16 +0000