US seizes domain of Garantex crypto exchange used by ransomware gangs

[Artifact]

The U.S. Secret Service has seized the domain of the sanctioned Russian cryptocurrency exchange Garantex in collaboration with the Department of Justice's Criminal Division, the FBI, and Europol.
Other law enforcement authorities involved in this action include the Dutch National Police, the German Federal Criminal Police Office, the Frankfurt General Prosecutor's Office, the Estonian National Criminal Police, and the Finnish National Bureau of Investigation.
Earlier today, Garantex was also forced to suspend services due to Tether blocking its digital wallets after the https://www.consilium.europa.eu/en/p...d-35-entities/ as part of its 16th package of sanctions against Russia, which https://eur-lex.europa.eu/legal-cont...OJ:L_202500389.
"We have bad news. Tether entered the war against the Russian cryptographic market and blocked our wallets in the amount of more than 2.5 billion rubles," the Garantex team said in a Telegram post on Thursday.
"We temporarily suspend the provision of all services, including the findings of cryptocurrency, for a while, while the whole team is solving this problem. We're fighting and we're not giving up! We draw your attention to the fact that all USDT on Russian wallets is now at risk."
After seizing Garantex's domain garantex[.]org, the Secret Service also changed the name servers to ns1.usssdomainseizure.com and ns2.usssdomainseizure.com.

Garantex seizure banner (BleepingComputer)
The Russian exchange was previously https://www.bleepingcomputer.com/new...-hydra-market/ in April 2022 after over $100 million in Garantex transactions were linked to darknet markets and cybercrime actors, including the notorious Conti Ransomware-as-a-service (RaaS) operation and the Hydra dark web market.
"The majority of Garantex's operations are carried out in Moscow, including at Federation Tower, and St. Petersburg, Russia, where other sanctioned virtual currency exchanges have also operated," https://home.treasury.gov/news/press-releases/jy0701 at the time.
Garantex lost its license to provide virtual currency services in February 2022 after Estonia's Financial Intelligence Unit found links between Garantex and wallets used for criminal activity and critical compliance issues with Anti-Money Laundering and Countering the Financing of Terrorism (AML/CFT) policies.
"Despite losing its Estonian license to provide virtual currency services following the Estonian Financial Intelligence Unit's investigation, Garantex continues to provide services to customers through unscrupulous means," OFAC added.
Two years later, OFAC https://www.bleepingcomputer.com/new...somware-gangs/ for laundering funds for Russian ransomware gangs and other cybercrime groups.
It also targeted the https://www.bleepingcomputer.com/new...-market-banks/ in March 2024 and designated the https://www.bleepingcomputer.com/new...zarus-hackers/, https://www.bleepingcomputer.com/new...orean-hackers/, and https://www.bleepingcomputer.com/new...orean-hackers/ crypto-mixing services for laundering money for the North Korean Lazarus hacking group.
https://www.bleepingcomputer.com/new...somware-gangs/