Sanctioned Russian Bulletproof Hosting Firm Aeza Caught Sending Affiliate Recruitment Emails

A cybersecurity-aware recipient received an unsolicited PDF from Aeza Group promoting a hosting affiliate program offering up to 40% recurring commissions. After verifying the sender against the U.S. Treasury OFAC sanctions list, the recipient confirmed Aeza Group was designated on July 1, 2025, as a bulletproof hosting provider based in St. Petersburg, Russia. The company had allegedly provided server infrastructure to infostealer malware and ransomware operators, including groups that targeted U.S. defense and technology firms, and hosted an illegal darknet drug marketplace. The email signature identified 'Aeza International LTD' at a London address, which OFAC had flagged as an overseas shell company set up specifically to evade sanctions. Despite the PDF itself being technically harmless, the recruitment pitch effectively solicited unsuspecting individuals to promote the infrastructure of a sanctioned criminal enterprise.