Law enforcement shuts down VPN service used by two dozen ransomware gangs

An planetary conjugation of instrumentality enforcement agencies announced Thursday that they took down a fashionable virtual backstage web work utilized by cybercriminals and arrested its administrator. 

The FBI said successful an alert that First VPN was truthful fashionable that “at least” 25 ransomware gangs utilized the work to fell their malicious activity. Cybercriminals besides relied connected the VPN to scan the internet, tally botnets, motorboat distributed denial-of-service attacks, and for moving scams. First VPN operated servers crossed 27 antithetic countries, according to the bureau.

Europol said successful an announcement that, isolated from offering anonymous connections, First VPN offered cybercriminals anonymous payments, hidden infrastructure, and different services specifically marketed for transgression hackers. 

“First VPN had go profoundly embedded successful the cybercrime ecosystem, appearing successful astir each large cybercrime probe supported by Europol successful caller years,” work the announcement. “Criminals utilized it to conceal their identities and infrastructure portion carrying retired ransomware attacks, large-scale fraud, information theft, and different superior offences.”

The work advertised connected known cybercrime forums, including astatine slightest 2 Russian-speaking marketplaces, promising criminals extortion against being identified. 

“We are for anonymity. We bash not store immoderate logs that would let america oregon 3rd parties to nexus an IP code successful a circumstantial play of clip with a idiosyncratic of our service,” FirstVPN said successful 1 station that TechCrunch has seen. “The lone information we store is email and username, but it is intolerable to nexus a user’s online enactment with a circumstantial idiosyncratic of our service.”

Europol, however, said that First VPN users were notified of the shutdown and “informed that they person been identified.” Investigators said they did this by obtaining the service’s idiosyncratic database and identifying VPN connections, which “exposed thousands of users linked to the cybercrime ecosystem.”

The planetary instrumentality enforcement bureau besides said First VPN’s head was arrested, dozens of servers “dismantled,” and its infrastructure was disrupted — each products of an probe launched successful December 2021.

Topics