A shadowy network of exploit brokers trafficking stolen U.S. government cyber tools has been the target of a significant crackdown by the US Department of the Treasury. The Office of Foreign Assets Control (OFAC) imposed sanctions on Russian national Sergey Zelenyuk, his company, Operation Zero, and several of its affiliates on February 24, 2026. In light of growing malevolent cyberthreats, such as those that take advantage of stolen tools, this audacious action targets threats to American intellectual property and national security.

Stolen Tools Fuel Global Threat Pipeline Operation Zero is a vicious exploit broker that offers researchers who find vulnerabilities in software developed in the United States substantial financial rewards. At least eight extremely sensitive cyber tools that were created specifically for the US government and its allies were recently taken by the group.

Peter Williams, an Australian former worker for a U.S. defense contractor, provided these. Williams stole these trade secrets between 2022 and 2025 and sold them to Operation Zero for millions of cryptocurrency. Zelenyuk quickly turned these assets into cash.

By aggressively marketing them to intelligence agencies in non-NATO countries, he opened a risky conduit for adversaries from other countries. These tools have the potential to cause devastating ransomware attacks or steal information from chat apps and large language models. In response, the United States imposed the first-ever sanctions under the Protecting American Intellectual Property Act. The Treasury's press release contains all the information.

Zelenyuk's network, which spans Russia, the United Arab Emirates, and Uzbekistan, is being destroyed by the penalties, which extend well beyond him.

Both his assistant, Marina Vasanovich, and Zelenyuk's dominant UAE company, Special Technology Services, are facing obstacles. Associate Oleg Kucherov has deep ties to cybercrime, having been a member of the notorious Trickbot gang, which was responsible for the devastating ransomware attacks on American hospitals. Azizjon Mamashoyev of Uzbekistan came under fire for using Operation Zero as a model for his company, Advance Security Solutions.

All of these players' assets held in the United States are currently frozen. Under penalty, Americans are not allowed to do business with them. This action feeds adversary arsenals by signaling zero tolerance for IP theft. Cybersecurity experts warn it could curb black-market tool flows, but brokers may just pivot underground.

Anticipate more such enforcements to protect critical technology as nation-state rivalries intensify. X and LinkedIn to Receive More Real-Time Updates.

Make ZeroOwl a Google Preferred Source.