US Sanctions Russian Exploit Broker for Stolen Tools

The United States imposed sanctions this week on a Russian cyber exploit broker and several associated individuals and entities for acquiring and distributing stolen cyber tools originally developed for exclusive use by the U.S. government and its allies. The actions, announced by the Departments of Treasury and State, target Sergey Sergeyevich Zelenyuk, his St. Petersburg-based company Operation Zero—also known as Matrix LLC—and a related firm in the United Arab Emirates, along with four other people and one additional organization.

According to the State Department, the sanctions stem from the theft of at least eight zero-day exploits—pieces of code that exploit undisclosed software vulnerabilities to enable unauthorized access, data theft, or system control—by Peter Williams, an Australian national and former employee of Trenchant, a division of the U.S. defense contractor L3Harris. From 2022 to 2025, Williams stole these proprietary tools, which were intended solely for U.S. and allied government operations, and sold them to Operation Zero for 1.3 million in cryptocurrency payments. Williams pleaded guilty last October to two counts of theft of trade secrets and was...