Treasury orders that a Russian zero-day broker is accused of buying stolen goods from a US contractor.

The US government he announced On Tuesday sanctions against two companies that acquire and resell Zero-day operationsand acknowledge the founders and peers.

US Treasury officials told TechCrunch that the government is imposing sanctions on those selling zero days – security vulnerabilities in software that are unknown to the developer but can be exploited to hack people – because they threaten US national security, foreign policy, and the economy.

The first official company is Operation Zero, a Russian company founded in 2021. The company made headlines in 2023 itself. announced that it was giving up to $20 million for zero days on Android devices and iPhones, and later announced was offering up to $4 million for zero days in Telegraph. The company what to say working with the Russian government and local organizations.

The Treasury’s Office of Foreign Assets Control (OFAC) said Operation Zero customers “could use the tools to launch ransomware attacks or engage in other malicious activities.”

The Treasury also said it would also recognize the company’s founder, Sergey Zelenyuk, who officials have accused of selling products to foreign intelligence agencies, and allegedly sought to develop technology for espionage and sabotage. The Treasury said Zelenyuk recruited hackers and established relationships with foreign intelligence agencies through social media. (Operation Zero has accounts on X and Telegraph.)

According to the Treasury, Operation Zero found “at least eight cyber weapons, designed for use by the US government and select affiliates and stolen from a US company,” and then “sold the stolen weapons to a single unauthorized individual.”

The Treasury said that the sanctions against Operation Zero and Zelenyuk are related to the FBI’s investigation of Peter Williams, who worked for the US Defense contractor L3Harris. In October, Williams agreed to sell at least eight of the company’s products to an anonymous Russian broker.

The Treasury now says the broker was Operation Zero, something the government has not previously confirmed.

Williams was a senior manager at Trenchant, which manufactures weapons and controls for the US government and some of its top partners, including Australia, Canada, New Zealand and the United Kingdom; the so-called Five Eyes international alliance.

The Treasury did not respond to several questions about today’s sanctions.

Along with the action against Zelenyuk, the US Treasury is approving a joint venture based in the United Arab Emirates called Special Technology Services; and Zelenyuk’s assistant, Marina Evgenyevna Vasanovich, and two people associated with the company, Azizjon Makhmudovich Mamashoyev, and Oleg Vyacheslavovich Kucherov, who worked with Operation Zero.

Operation Zero, Special Technology Services, and Zelenyuk are approved respectively 2022 federal law which allows the US government to impose sanctions on someone who has committed “serious theft of trade secrets,” according to the Treasury.

The Treasury says Kucherov, a native of Russia, is suspected of being a member of a ransom gang. Trickbotwho claim to be its members already to be allowed and the US and the United Kingdom.

Mamashoyev is said to be the founder of Advance Security Solutions, another zero-day broker in the UAE, which was also authorized today.

Advance Security Solutions it was launched last yearoffering $20 million for zero days that will help hack any phone and text message. The vendor also offered premium hacking tools for popular apps such as Android devices, iPhones, Windows, and Chrome.

Operation Zero and Zelenyuk did not respond to requests for comment. Kucherov, Mamashoyev, and Vasanovich could not immediately be reached for comment.

When contacted by TechCrunch, a person using the Advanced Security Solution social media account said without proof that Mamashoyev was not the founder of the company.