US Sanctions Operation Zero Over Stolen Zero-Days as Ex-Executive Is Sentenced
Summary
The U.S. Treasury sanctioned Operation Zero, its owner and associated entities under PAIPA, while former Trenchant executive Peter Williams was sentenced to 87 months for stealing and selling eight zero-day exploits.
Key points
- OFAC designated Matrix LLC, which does business as Operation Zero, its owner Sergey Zelenyuk, and associated individuals and companies under PAIPA—the law’s first use.
- Peter Williams was sentenced to 87 months after pleading guilty to stealing eight Trenchant zero-day exploits and selling them to Operation Zero for about $1.3 million in cryptocurrency.
- The Treasury said the exploits were proprietary tools created for U.S. and allied government use and that Operation Zero sold them to at least one unauthorized user.
- The sanctions also targeted UAE-based Special Technology Services LLC and exploit brokerage firm Advance Security Solutions, among others.
- Operation Zero offers bounties for exploits targeting widely used software and says it sells exploits only to Russian private and government organizations.
- The designations freeze U.S.-held assets of the targets and may expose U.S. counterparties to secondary sanctions or enforcement actions.
Article Details
- Event Type
- U.S. Treasury sanctions against an exploit broker and associated parties, coinciding with the sentencing of a former Trenchant executive for stealing and selling zero-day exploits.
- Impact
- The designations freeze U.S.-held assets and expose people and businesses transacting with the sanctioned parties to potential secondary sanctions or enforcement actions. Peter Williams was sentenced to 87 months after pleading guilty to stealing eight proprietary exploits and selling them to Operation Zero for approximately $1.3 million in cryptocurrency.
People
Threat Actors
Matrix LLCThe U.S. Treasury designated the company under PAIPA in connection with trading in stolen cyber exploits; the article says it does business as Operation Zero.Operation ZeroThe article identifies this as the name under which Matrix LLC does business. It reportedly bought eight stolen exploits from Peter Williams for approximately $1.3 million and sold stolen tools to at least one unauthorized user.Peter WilliamsWilliams pleaded guilty to stealing eight zero-day exploits from Trenchant and selling them to Operation Zero; he was sentenced to 87 months in prison.Sergey Sergeyevich ZelenyukThe U.S. Treasury designated him alongside Matrix LLC; the Treasury said Zelenyuk and Operation Zero trade in exploits and offered rewards for exploits targeting U.S.-built software.Trickbot GroupDescribed in the article as a cybercrime gang; Oleg Vyacheslavovich Kucherov is identified as a suspected member.
Vendors
Countries
RussiaPetersburg, Russia) on Tuesday, along with its owner, Sergey Sergeyevich Zelenyuk, and five associated individuals and companies.United Arab Emiratesgang) and a second exploit brokerage firm, Advance Security Solutions, with operations in the United Arab Emirates and Uzbekistan.United StatesThe U.S. Treasury sanctioned Matrix LLC (Operation Zero), its owner Sergey Zelenyuk, and associated entities for buying stolen zero-day exploits sold by a former L3Harris cyber unit executive.Uzbekistanexploit brokerage firm, Advance Security Solutions, with operations in the United Arab Emirates and Uzbekistan.