Global raid shuts down ransomware-linked VPN First VPN and seizes its infrastructure
TL;DR
An international operation led by France and the Netherlands, with Europol/Eurojust support, dismantled the ‘First VPN’ service used by ransomware and data-theft actors. Authorities seized 33 servers across 27 countries, shut down key domains, disrupted infrastructure, and arrested the administrator in Ukraine. Investigators infiltrated the VPN to recover data, with Europol reporting 506 identified users and 83 intelligence packages shared to aid ongoing investigations into ransomware and related crimes. While VPNs have legitimate uses, criminals leveraged this service to hide activity; all identified users have been notified and further legal action may follow.
- Police seize “First VPN” service used in ransomware, data theft attacks BleepingComputer
- Cybercriminal VPN used by ransomware actors dismantled in global crackdown Europol
- Law enforcement shuts down VPN service used by two dozen ransomware gangs TechCrunch
- European authorities take down prolific cybercrime VPN service CyberScoop
- Cybercriminal VPN Dismantled in Europol Crackdown Infosecurity Magazine
Want the full story? Read the original reporting
Read on BleepingComputer