Authorities dismantle the “First VPN” virtual private network service used by cybercriminals to obscure activity tied to ransomware and other attacks, according to multiple reports. Europol describes the crackdown as targeting a VPN previously marketed to criminals and used for malicious purposes such as ransomware-related activity, fraud, network reconnaissance, and intrusions. SecurityWeek and TechRadar report that the FBI links “First VPN” to use by dozens of ransomware groups, with TechRadar specifically citing 25 groups. The operation is described as international, involving European and North American law enforcement, with leadership attributed to France and the Netherlands and support from Europol and Eurojust. Help Net Security and The Hacker News report the disruption occurs as part of an operation referred to as “Operation Saffron,” with the service taken offline on May 19 and 20 and investigations ongoing since at least December, according to some accounts. Help Net Security adds that authorities dismantle multiple servers associated with the service and interview the operator in Ukraine, while targeted domain names are seized and shut down through cross-border judicial and law-enforcement coordination. SecurityWeek also reports that the administrator is arrested.
Europol-led operation disrupts “First VPN” used by ransomware and fraud groups
Authorities dismantle the “First VPN” virtual private network service used by cybercriminals to obscure activity tied to ransomware and other attacks, according to multiple reports. Europol describes...
- Law enforcement dismantles the “First VPN” criminal VPN service used to obscure origins of cyberattacks.
- Authorities link “First VPN” usage to ransomware activity, including reconnaissance and intrusions, with reporting citing 25 ransomware groups.
- The operation is led by France and the Netherlands with support from Europol and Eurojust, and includes coordination with U.S. authorities.
- The service and associated infrastructure/domains are taken offline during a coordinated operation on May 19–20.
- An administrator is reportedly arrested, and authorities seize servers and related domains.
FBI links First VPN’s activities to gangs involved in cybercrime and calls for tighter security controls and behavioural monitoring to prevent cyberattacks.
3 months agoAuthorities in Europe and North America have announced the dismantling of a criminal virtual private network (VPN) service used by criminal actors to obscure the origins of ransomware attacks, data theft, scanning, and denial-of-service attacks. The disruption of First VPN Service was led by France and the Netherlands, with several other nations supporting the investigation since December
3 months agoThe FBI says First VPN has been used by dozens of ransomware groups for network reconnaissance and intrusions. The post ‘First VPN’ Cybercrime Service Disrupted, Administrator Arrested appeared first on SecurityWeek.
3 months agoFirst VPN, a service used by ransomware actors and fraudsters, was dismantled by Europol
3 months agoFirst VPN, a virtual private network service marketed to cybercriminals, promising anonymity for its users, was taken offline on May 19 and 20 as part of Operation Saffron. During the operation, French and Dutch authorities, with support from Europol and Eurojust, dismantled 33 servers linked to the service and interviewed the operator in Ukraine. The targeted domain names were shut down through international cooperation between law enforcement and judicial authorities. The seized domains included 1vpns.com, … More → The post Authorities dismantle First VPN, used by ransomware actors appeared first on Help Net Security.
3 months agoA virtual private network service called 'First VPN,' used in ransomware and data theft attacks, has been taken offline in a joint international law enforcement operation. [...]
3 months ago
Sokoto Hisbah denies claims it restricts Christian worship
Sokoto State’s Hisbah Board rejects social media claims that the state’s religious enforcement agency is restricting Chr...
Meta to charge businesses for WhatsApp Business messages from October 1, 2026
Meta says it will start charging businesses for certain customer-service and utility messages on WhatsApp Business from...
China blocks online access to Nepal-Tibet flood coverage as viral videos spread
Deadly flooding linked to Nepal-Tibet impacts sweeps down the Trisuli River, and videos showing muddy water washing away...