U.S. Treasury Sanctions VPN Provider and Cryptor Seller Behind Billions in Ransomware Losses

Multiple high-impact cybersecurity developments: the U.S. Treasury/OFAC sanctioned a VPN provider (1VPNS), a cryptor seller and individuals tied to enabling ransomware campaigns that caused billions in losses to critical infrastructure; Huntress discovered an AI-generated PowerShell AD reconnaissance script used in a compromise; Japan’s largest taxi operator Nihon Kotsu suffered a malware-driven service outage; a new macOS infostealer named CrashStealer abuses signed apps to bypass Gatekeeper, exfiltrates credentials/wallets and AES-encrypts stolen data; Lidl notified customers of a third‑part