Police boast of hacking VPN where criminals “believed themselves to be safe”

Law enforcement agencies across Europe have successfully infiltrated a virtual private network (VPN) service that was a favored tool for cybercriminals, particularly those engaged in ransomware attacks. This operation has led to the identification of thousands of users before the VPN was taken offline and its administrator arrested. Europol announced the operation's outcome, revealing that the VPN service, known as First VPN, was seized in a coordinated effort led by France and the Netherlands, with substantial support from Europol and Eurojust. The website of First VPN now carries a notice indicating its closure due to this international law enforcement initiative. For many years, First VPN was marketed on Russian-speaking cybercrime forums as a reliable means for criminals to evade law enforcement detection. It provided features such as anonymous payment options and concealed infrastructure tailored specifically for illegal activities. The investigation commenced in December 2021. As part of their efforts, authorities managed to gain access to the VPN service, allowing them to retrieve its user database and track connections utilized by cybercriminals attempting to mask their illicit operations. Security firm Bitdefender played a crucial role in assisting law enforcement during this operation. According to Europol, the intelligence gathered during the investigation uncovered thousands of users involved in the cybercrime ecosystem, leading to actionable insights related to global ransomware attacks and fraud schemes. A spokesperson from the Dutch National Police Corps noted that prior to the seizure of the domain, police had monitored the criminal activities of users who were under the false impression that they were secure. Archived versions of the now-defunct VPN's website showcase its claims of IP address concealment, encrypted communications, and an assurance of user anonymity, commonly known as the 'no logs' policy, which is often touted by VPN providers to guarantee that user records are not stored or shared with law enforcement agencies or other third parties.