Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchThe United States, United Kingdom and Australia announced coordinated sanctions against Russia-based hosting provider Zservers on February 11, 2025. U.S. officials say Zservers supplied leased IP addresses and other infrastructure used by LockBit ransomware affiliates to coordinate and launch attacks. The action targeted alleged support infrastructure—not a finding by a court that Zservers was responsible for particular attacks.
Why did the U.S. sanction a Russian hosting provider?
The U.S. Treasury Department said Zservers materially assisted or supported LockBit, a ransomware operation, by providing bulletproof hosting. Such services can give customers internet-connected infrastructure, including IP addresses, while making it harder to identify or interrupt the people using it. Treasury said LockBit affiliates used Zservers infrastructure to coordinate and launch attacks.
The designation was announced jointly by the U.S. Treasury’s Office of Foreign Assets Control (OFAC), Australia’s Department of Foreign Affairs and Trade, and the U.K. Foreign, Commonwealth & Development Office. The U.K. said its parallel action covered Zservers, six people associated with it, and XHOST Internet Solutions LP, which it described as a U.K. front company. The governments presented the case as an effort to restrict the services and networks that help ransomware actors operate.
The U.K. described Zservers as a launch pad for attacks against U.K. targets, including nonprofits. U.K. Minister of State for Security Dan Jarvis said the action was intended to deny cybercriminals tools they use to cause harm. These are government assessments and allegations supporting sanctions, not a judicial determination of Zservers’ liability.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →#1 Best Overall
- Compact and Efficient Design: The FortiGate 40F is designed for small to mid-sized businesses and enterprise branch offices, featuring a compact, fanless desktop form factor that ensures quiet operation and minimizes space usage.
- Robust Connectivity Options: Equipped with 5 GE RJ45 ports, including 1 WAN port and 4 internal ports, this model provides essential connectivity and flexibility for various network configurations in a small-scale environment.
- High-Performance Security: Offers up to 1 Gbps IPS throughput and 600 Mbps threat protection throughput, using Fortinet’s purpose-built security processor technology to deliver industry-leading performance and protection for SSL encrypted traffic.
- Advanced Threat Protection: Integrated with Fortinet’s AI-powered FortiGuard Labs, the FortiGate 40F offers comprehensive cybersecurity, identifying and mitigating both known and unknown threats to maintain robust security across your network.
- Simplified Management and Deployment: Features a user-friendly management console that provides comprehensive network automation and visibility, coupled with Zero Touch Integration with Fortinet’s Security Fabric for easy deployment.
What is bulletproof hosting?
Bulletproof hosting refers to hosting infrastructure offered to customers who want their online services to resist complaints, investigation or shutdown. In a ransomware operation, a hosting provider may supply servers or IP addresses that attackers use to communicate, manage services or support operations. The provider does not need to create ransomware or choose victims to be useful to a criminal group: reliable infrastructure and the ability to replace disrupted connections can help affiliates keep operating.
That alleged enabling and concealment role is central to the Zservers action. It is different from accusing a hosting company of carrying out every attack that passes through infrastructure it leases. In this case, Treasury said Zservers knowingly supported LockBit affiliates; its announcement set out investigative details behind that assessment.
Rank #2
- HARDWARE PLUS SECURITY SERVICES: FortiGate-60F Firewall Appliance bundled with 1 year of FortiCare Premium and FortiGuard Unified Threat Protection.
- UNIFIED THREAT PROTECTION (UTP): Secures against advanced online threats with comprehensive web filtering and anti-botnet technologies.
- OPTIMIZED FOR MEDIUM-SIZED BUSINESSES: Tailored for businesses needing robust security without the infrastructure of larger enterprises.
- RELIABLE CUSTOMER SUPPORT: FortiCare Premium ensures high-quality support and service continuity.
- EFFECTIVE PROTECTION: Employs advanced filtering technologies to safeguard against sophisticated threats.
How did Treasury link Zservers to LockBit?
Treasury’s February 11, 2025 announcement described several episodes it said connected Zservers infrastructure to LockBit-related activity:
- 2022: Treasury said Canadian law enforcement found a virtual machine connected to a Zservers-subleased IP address while searching a known LockBit affiliate. Treasury also said a Russian cybercriminal bought Zservers IP addresses almost certainly for LockBit chat servers.
- 2023: Treasury said Zservers leased infrastructure, including a Russian IP address, to a LockBit affiliate. It also recounted a Lebanese company’s complaint about an IP address allegedly used in a LockBit attack. Treasury said that after the address was shut down, Zservers likely enabled activity to continue by assigning another address.
These details are Treasury’s account of investigative findings and its assessment of Zservers’ role. They do not establish a verified share of LockBit attacks hosted by Zservers, or losses attributable specifically to the provider. The U.K. separately cited a figure of $1 billion in losses to victims globally from ransomware attacks in 2023; that figure concerns ransomware overall, not LockBit or Zservers alone.
Rank #3
- 【Up to 1100 Mbps VPN Speed 】 Hardware-accelerated WireGuard and OpenVPN-DCO deliver up to 1100 Mbps VPN throughput, over 3× faster than Brume 2 for smooth remote access and file transfers.
- 【Three 2.5G Ports & Multi-WAN】Tri-port 2.5GbE design with flexible WAN LAN configuration supports multi-gigabit wired setups, dual-ISP Multi-WAN and failover to keep home and SOHO networks online.
- 【Stealth VPN Obfuscation】VPN obfuscation disguises VPN traffic as regular HTTPS, helping you evade blocking, bypass restrictive networks and maintain stable, private connections.
- 【DPI protection】Deep Packet Inspection with visual dashboards blocks adult/gambling/malicious sites, while SQM and QoS prioritize gaming, calls, and video when bandwidth is tight
- 【OpenWrt & USB 3.0 Expansion】OpenWrt with 1GB DDR4 and 8GB eMMC lets you install plugins and build VPN, ad-blocking or NAS, while USB 3.0 Type‑C connects high-speed storage or 4G/5G dongles
What do the Zservers sanctions mean?
OFAC designated Zservers under Executive Order 13694, as amended by Executive Order 14144, for materially assisting or supporting LockBit. The main practical consequence is a restriction on property and transactions within U.S. jurisdiction—not a universal prohibition binding every person worldwide.
- Property and interests in property of designated persons that are in the United States, or in the possession or control of U.S. persons, must be blocked and reported to OFAC.
- U.S. persons generally may not transact in blocked property unless an authorization or exemption applies.
- Entities owned 50 percent or more, directly or indirectly, by one or more blocked persons are also blocked under OFAC’s 50 Percent Rule, even if they are not separately named on the sanctions list.
- Some dealings can expose financial institutions or other persons to sanctions or enforcement risk. The precise effect depends on the parties, property, jurisdiction and any applicable authorization or exemption.
The U.K.’s action was separate and covered Zservers, six members and XHOST Internet Solutions LP. The U.K. consolidated financial sanctions list identifies ZSERVERS with a designation date of February 11, 2025. Sanctions listings and applicable rules can change, so anyone making a real transaction decision should check the current official lists and seek qualified legal advice.
Rank #4
- Runs UniFi Network for full-stack network management
- Manages 30+ UniFi Network devices and 300+ clients
- 1 Gbps routing with IDS/IPS
- Multi-WAN load balancing
- 0.96" LCM status display
Did the sanctions disrupt LockBit?
The February 11, 2025 announcements describe sanctions intended to make it harder for LockBit affiliates to obtain infrastructure and to disrupt support networks. They do not establish that the designation took Zservers offline, ended LockBit activity or prevented subsequent attacks. Sanctions block certain dealings and impose costs; they are not the same as physically seizing servers or taking a criminal group’s systems under law-enforcement control.
That distinction matters because the U.S. and U.K. had already announced a different LockBit operation on February 20, 2024. The Justice Department said that operation seized websites and gained control of administrator servers. It also said investigators had developed decryption capabilities that might help hundreds of victims restore systems. That was a law-enforcement disruption aimed at LockBit’s own infrastructure; the 2025 action targeted an alleged infrastructure provider through financial sanctions.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Quick Recap
| Action | Target | Mechanism | Stated outcome |
|---|---|---|---|
| U.S.-U.K. LockBit disruption, February 20, 2024 | LockBit websites and administrator servers | Law-enforcement seizure and control | Disrupt operations; decryption capabilities might help victims restore systems |
| Coordinated Zservers designations, February 11, 2025 | Zservers and associated entities or individuals covered by each government’s action | Financial sanctions and restrictions on dealings within the relevant jurisdictions | Restrict access to alleged support infrastructure and disrupt enabling networks |
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
