radar

ONE Sentinel

securitySecurity/THREATS/HIGH

First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups

sourceThe Hacker News
calendar_todayMay 22, 2026
schedule1 min read
lightbulb

EXECUTIVE SUMMARY

Global Takedown Dismantles Criminal VPN Used by Ransomware Groups

Summary

Authorities in Europe and North America have dismantled a criminal VPN service known as First VPN Service. This service was used by ransomware groups to hide the origins of their attacks.

Key Points

  • The operation was led by France and the Netherlands.
  • The VPN was used by 25 ransomware groups.
  • The service facilitated ransomware attacks, data theft, scanning, and denial-of-service attacks.
  • The investigation has been ongoing since December.

Analysis

The dismantling of the First VPN Service marks a significant step in disrupting the infrastructure used by cybercriminals. By targeting the tools that enable anonymity, authorities can hinder the operations of ransomware groups, potentially reducing the frequency and impact of such attacks. This action highlights the importance of international cooperation in cybersecurity efforts.

Conclusion

IT professionals should be aware of the ongoing efforts to dismantle criminal infrastructures and consider the implications for their own security measures. Continuous monitoring and updating of security protocols are recommended to mitigate risks associated with such threats.