US Treasury Sanctions Seller of Crypto-Funded Cyber Tools
The U.S. Treasury Department sanctioned an Australian national for selling cyber tools that were funded by millions of dollars in cryptocurrency. The tools were designed to exploit U.S. government and allied software. The action was formally published in the Federal Register, signaling increased regulatory scrutiny on the use of crypto for illicit activities.
- The sanctioned individual is Peter Williams, an Australian national and former employee of a U.S. company from which he stole the cyber tools. - From 2022 to 2025, Williams sold at least eight proprietary "exploits" to a Russian firm called Operation Zero, run by Sergey Sergeyevich Zelenyuk. These tools were designed for the exclusive use of the U.S. government and its allies. - In exchange for the stolen tools, Williams received up to US$4 million in cryptocurrency payments from Operation Zero. - This marks the first instance of the U.S. Treasury using the Protecting American Intellectual Property Act to issue sanctions. - The Department of Justice and the FBI investigated the case, leading to Williams pleading guilty to two counts of theft of trade secrets in October 2025. - Operation Zero and Zelenyuk were also sanctioned for acquiring and distributing the cyber tools, with the company known for offering rewards for exploits targeting U.S.-built software. - The sanctions also targeted other individuals, including one suspected member of the Trickbot cybercrime group, which has been linked to ransomware attacks.
