According to OFAC, the sanctioned Iranian financier Babak Zanjani utilized BitBank to facilitate hundreds of millions of dollars in Bitcoin transfers to the IRGC between June and July. Additionally, the exchange was used by Hormuz Safe Marine Services Authority, previously sanctioned for an alleged maritime-payment scheme in the Strait of Hormuz, to transfer funds to the Iranian government since June.

The scope of the sanctions extends beyond BitBank to include Pishtaz Simorgh Electronic Trade Company, the software developer behind the exchange, and three individuals connected to Zanjani’s corporate network. These entities were designated under Executive Order 13902, which has been expanded by Treasury to cover Iran’s digital-asset sector.

Treasury Secretary Scott Bessent emphasized that crypto-based financing is not beyond OFAC’s reach and warned that parties supporting the Iranian government could also become targets of sanctions. This action is part of Operation Economic Outcast, a broader campaign launched by Treasury in August to cut off Iran from financial channels used to evade sanctions and fund the IRGC.

BitBank is the latest Iranian crypto platform to be targeted in this effort, following the sanctions imposed on several other exchanges earlier this year. The accumulating designations reflect Washington’s increasing focus on Iranian crypto venues as part of interconnected financing networks rather than isolated trading businesses.

The sanctions on BitBank also target the developers, executives, and corporate infrastructure that enabled Zanjani’s network to move funds. Pishtaz Simorgh, the software developer for BitBank, is a subsidiary of Dot One Value Creation Group, which was sanctioned in July as part of another action against Zanjani’s commercial network.

TRM Labs, a blockchain-intelligence firm, has been investigating Zanjani’s crypto network and identified a wider ecosystem that includes various companies, payment systems, and digital infrastructure connected to the sanctioned exchanges. This network includes BitBank, Pishtaz Simorgh, and other businesses linked to Zanjani’s sanctions-evasion activities.

The inclusion of BitBank’s software company in the sanctions reflects a broader approach by Treasury to target entities beyond blockchain addresses alone. Corporate ownership, software development, payment relationships, and executive control play a crucial role in connecting entities that may appear separate on-chain.

The sanctions also target key individuals involved in Zanjani’s sanctions-evasion activities, including Mohammad Mahdi Zaker Hossein, Hossein Ali Zaker Hossein, and Seyed Adel Heidari. These individuals played significant roles in facilitating transactions that ultimately reached the IRGC.

Overall, the sanctions on BitBank and its associated entities demonstrate the US government’s commitment to disrupting illicit financial activities that support the Iranian government and its military operations. By targeting crypto exchanges and their ecosystem, Treasury aims to cut off Iran from international financial channels and prevent the flow of funds to entities like the IRGC.

This campaign was detailed in HP’s September threat report, which was published on September 17 and based on threats observed from April through June 2026. The compromise did not involve a breach of popular crypto wallets like Coinbase or MetaMask, but rather exploited a counterfeit trading tool that users downloaded and ran on their systems.

Malwarebytes had previously documented the TradingClaw campaign in April, revealing that the fake AI assistant was just one part of a broader malware operation. Attackers promoted tradingclaw[.]pro as a sophisticated AI assistant for trading, luring victims through search-engine poisoning and paid advertisements.

The malicious software was distributed through a ZIP file containing an executable named Trading Agent.exe and a DLL named iviewers.dll. While the executable appeared to be a legitimate Microsoft program, it actually contained a malicious payload in the DLL. When users ran the program, it loaded the DLL, which then decrypted Needle Stealer and used process hollowing to run the malicious code within a legitimate process.

Needle Stealer, the malware used in this campaign, targeted popular browser extensions for crypto wallets like Phantom, Trust Wallet, MetaMask, and others. Once a target extension was identified, the malware replaced it with a malicious version that connected to a command-and-control server controlled by the attacker. This fake extension could capture users’ login credentials and send them to the attacker, putting their funds at risk.

While MetaMask advises users that their wallet password only unlocks the wallet locally and cannot restore it elsewhere, the compromised device could still be used to access locally stored funds. HP did not disclose the full extent of the campaign’s impact or the total amount of crypto stolen, leaving many questions about the operation unanswered.

This detailed analysis of the fake AI crypto-trading assistant campaign highlights the ongoing threats faced by cryptocurrency users and the importance of staying vigilant against such malicious activities. In today’s fast-paced world, it can be easy to overlook the importance of self-care. With the demands of work, family, and other responsibilities constantly pulling us in different directions, it’s essential to take time for ourselves and prioritize our well-being.

Self-care is not selfish; it’s necessary for maintaining a healthy balance in our lives. When we neglect our own needs, we can become overwhelmed, stressed, and even burnt out. This can have negative effects on our physical and mental health, as well as our relationships with others.

There are many different ways to practice self-care, and it’s important to find what works best for you. This could include activities such as taking a long bath, going for a walk in nature, practicing mindfulness or meditation, reading a book, or spending time with loved ones. Whatever it is that helps you to relax and recharge, make sure to prioritize it regularly.

Self-care is not just about pampering yourself; it’s about nurturing your mind, body, and soul. This means taking care of yourself in all aspects of your life, including your physical health, emotional well-being, and spiritual growth. It’s about listening to your needs and taking the time to address them.

Incorporating self-care into your daily routine can have numerous benefits. It can help reduce stress, improve your mood, boost your energy levels, and increase your overall sense of well-being. By taking care of yourself, you are better able to show up as your best self in all areas of your life.

It’s important to remember that self-care is not a one-time thing; it’s an ongoing practice. Make self-care a priority in your life and commit to taking time for yourself regularly. You deserve to feel happy, healthy, and fulfilled, and self-care is a crucial step in achieving that.

So, take a moment to reflect on your own self-care routine. Are you making yourself a priority? Are you taking the time to nurture your mind, body, and soul? If not, it’s never too late to start. Make self-care a non-negotiable part of your life and watch as you thrive in all areas of your life.