Skip to content
Special Technology Services
OrganisationAE

Special Technology Services

UAE-based shell company designated by OFAC as the Gulf routing vehicle for Operation Zero's exploit acquisition network.

Last refreshed: 17 April 2026 · Appears in 1 active topic

Key Question

How did a UAE company end up sanctioned for selling stolen US hacking tools?

Timeline for Special Technology Services

#117 Apr

UAE-based shell company in the Operation Zero network

Cybersecurity: Threats and Defences: Mentioned in: OFAC turns IP law on Operation Zero
View full timeline →
Common Questions
Why was a UAE company sanctioned alongside Russian hackers?
Special Technology Services was a UAE-based company used to route Operation Zero's exploit acquisitions through Gulf corporate infrastructure, distancing sanctioned Russian entities from the transactions. OFAC designated it in April 2026 under PAIPA alongside Zelenyuk and Matrix LLC.Source: OFAC

Background

Special Technology Services is the United Arab Emirates-based company OFAC designated in April 2026 as part of the Operation Zero exploit broker network sanctions. It served as the Gulf routing vehicle allowing Russian-origin exploit acquisitions to traverse UAE corporate infrastructure, keeping Matrix LLC and other Russian-designated entities off the primary paperwork trail.

The company's designation alongside Sergey Zelenyuk, Marina Vasanovich, Azizjon Mamashoyev and Oleg Kucherov under the Protecting American Intellectual Property Act (PAIPA) maps the full brokerage network rather than targeting only the Russian principal. The UAE layer is the structural insight in the action: routing acquisitions through Gulf shell companies is a technique used across several sanctioned Russian networks to access US-dollar financial infrastructure.

For compliance officers at UAE financial institutions and Gulf corporate service providers, the OFAC designation of a UAE-registered vehicle in a Russian cyber-tool brokerage creates direct correspondent banking and KYC exposure. The designation names the routing structure explicitly, which removes the ambiguity that might otherwise shield facilitating entities.