Share this article
BTC
$102,860.90
+
3.89%ETH
$2,303.57
+
5.21%USDT
$1.0007
-
0.01%XRP
$2.0571
+
4.52%BNB
$629.51
+
3.87%SOL
$138.96
+
7.45%USDC
$1.0001
-
0.04%TRX
$0.2723
+
3.89%DOGE
$0.1568
+
6.23%ADA
$0.5524
+
5.22%HYPE
$36.69
+
8.81%WBT
$47.71
-
0.46%BCH
$454.07
+
2.03%SUI
$2.6089
+
10.51%LEO
$9.0559
+
1.13%LINK
$12.10
+
7.50%XLM
$0.2351
+
5.60%AVAX
$17.17
+
7.50%TON
$2.8398
+
5.92%SHIB
$0.0₄1111
+
7.89%Sign Up
- Back to menuPrices
- Back to menuResearch
- Back to menu
- Back to menu
- Back to menu
- Back to menu
- Back to menuWebinars
US Treasury Blacklists Several More Bitcoin Addresses Allegedly Tied to Iran Ransomware Attacks
The sanctions watchdog agency added several bitcoin addresses allegedly used in ransomware attacks to its blacklist.
The U.S. Treasury Department added nine individuals and six bitcoin addresses to its blacklist Wednesday, under its “cyber-related designations” bucket.
The addresses were specifically tied to two individuals – Amir Hossein Nikaeen Ravari and Ahmad Khatibi Aghada – who allegedly helped develop and deploy ransomware as members of Iran’s Islamic Revolutionary Guard Corps (IRGC), according to a press release published by the Treasury Department.
STORY CONTINUES BELOW
The sanctioning came as U.S. government officials charged three individuals with hacking-related crimes. Alongside Mansour Ahmadi, Nikaeen Ravari and Aghada allegedly broke into hundreds of U.S. companies and deployed ransomware to several of these entities, including U.S. infrastructure entities, the Justice Department claimed.
The individuals are part of a hacker group that targeted hospitals, transportation companies and schools with ransomware, Treasury officials said in a press statement. It further accused the group of mounting a cyberattack against a rural electric utility company in October 2021.
The wallets did not contain any bitcoin Tuesday, having drained their balances between last October and this past May. One address linked to both individuals held 2.49 BTC over the course of its life.
Several of the addresses have not been active since 2021, according to on-chain data.
The Treasury Department’s Office of Foreign Assets Control (OFAC) has added a number of Iranian officials to its Specially Designated Nationals (SDN) list in recent weeks over cyberattacks allegedly committed by members of Iran’s government.
U.S. persons and entities – meaning anyone on American soil or any U.S. citizens abroad – are barred from transacting with the addresses or people added to the sanctions list.
Last week, OFAC added Iran’s Minister of Intelligence, Esmail Khatib, and its Ministry of Intelligence and Security, to the SDN list for allegedly attacking the country of Albania, which faced an unspecified hack earlier this year (Iran has denied the allegations).
OFAC has sanctioned crypto wallet addresses for years now, having first done so in 2018 when two other Iranian residents were accused of laundering funds for ransomware creators.
UPDATE (Sept. 14, 2022, 15:15 UTC): Adds additional detail.
Nikhilesh De
Nikhilesh De is CoinDesk's managing editor for global policy and regulation, covering regulators, lawmakers and institutions. He owns < $50 in BTC and < $20 in ETH. He won a Gerald Loeb award in the beat reporting category as part of CoinDesk's blockbuster FTX coverage in 2023, and was named the Association of Cryptocurrency Journalists and Researchers' Journalist of the Year in 2020.
Danny Nelson
Danny was CoinDesk's managing editor for Data & Tokens. He formerly ran investigations for the Tufts Daily. At CoinDesk, his beats include (but are not limited to): federal policy, regulation, securities law, exchanges, the Solana ecosystem, smart money doing dumb things, dumb money doing smart things and tungsten cubes. He owns BTC, ETH and SOL tokens, as well as the LinksDAO NFT.
Top Stories
